Simple message routing system that receives input messages through a webhook interface and can enforce actions using predefined outputs via integrations.

Stars: ✭ 160 (+255.56%)

Mutual labels: opa

OPA-python-client

Python client for Open Policy Agent

Stars: ✭ 24 (-46.67%)

Mutual labels: opa

s3-proxy

S3 Reverse Proxy with GET, PUT and DELETE methods and authentication (OpenID Connect and Basic Auth)

Stars: ✭ 106 (+135.56%)

Mutual labels: opa

opa-kafka-plugin

Open Policy Agent (OPA) plug-in for Kafka authorization

Stars: ✭ 46 (+2.22%)

Mutual labels: opa

fury-kubernetes-opa

Kubernetes Fury OPA. Policy enforcement for your Kubernetes Cluster

Stars: ✭ 34 (-24.44%)

Mutual labels: opa

Opa

An open source, general-purpose policy engine.

Stars: ✭ 5,939 (+13097.78%)

Mutual labels: opa

dotnet-opa-wasm

Call Open Policy Agent (OPA) policies in WASM (Web Assembly) from .NET Core

Stars: ✭ 36 (-20%)

Mutual labels: opa

opa-docker-authz

A policy-enabled authorization plugin for Docker.

Stars: ✭ 67 (+48.89%)

Mutual labels: opa

container-image-sign-and-verify-with-cosign-and-opa

This is just a proof-of-concept project that aims to sign and verify container images using cosign and OPA (Open Policy Agent)

Stars: ✭ 54 (+20%)

Mutual labels: opa

prancer-compliance-test

This repository includes cloud security policies for IaC and live resources.

Stars: ✭ 32 (-28.89%)

Mutual labels: opa

opa-spring-security

Open Policy Agent for Spring Security

Stars: ✭ 19 (-57.78%)

Mutual labels: opa

ccheck

A command line tool for validating Kubernetes configs with rego

Stars: ✭ 63 (+40%)

Mutual labels: opa

opa-java-spring-client

Simple Spring client for working with the Open Policy Agent

Stars: ✭ 19 (-57.78%)

Mutual labels: opa

CKS-Exercises-Certified-Kubernetes-Security-Specialist

A set of curated exercises to help you prepare for the CKS exam

Stars: ✭ 124 (+175.56%)

Mutual labels: opa

pre-commit-opa

Pre-commit git hooks for Open Policy Agent (OPA) and Rego development

Stars: ✭ 53 (+17.78%)

Mutual labels: opa

View All Similar Projects ➔

ARMO rego library

ARMO rego library for detecting miss-configurations in Kubernetes manifests

MITRE ATT&CK® Framework

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Impact
Using Cloud credentials	Exec into container	Backdoor container	Privileged container	Clear container logs	List k8s secrets	Access the K8S API server	Access cloud resources	Image from private registry	Data Destruction
Compromised Image in registry	bash/cmd inside container	Writable hostPath mount	Cluster-admin binding	Delete K8S events	Mount service principal	Access Kubelet API	Container service account		Resources Hijacking
kubeconfig file	New container	kubernetes CronJob	hostPath mount	Pod/Container name similarity	Access container service account	Network mapping	Cluster internal networking		Denial of service
Application vulnerability	Application Exploit (RCE)	Malicious admission controller	Access cloud resources	Connect from Proxy server	Application credentials in configuration files	Access kubernetes dashboard	Application credentials in configuration
Exposed Dashboard	SSH server running insider container				Access managed identity credentials	instance Metadata API	Writable volume mounts on the host
Exposed sensitive interface	Sidecar injection				Malicious admission controller		Access kubernetes dashboard
							access tiller endpoint
							CoreDNS poisoning
							ARP and IP spoofing

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].

Cheap and reliable Node.js hosting starts at $3/month, and $1/month static HTML hosting

armosec / regolibrary

Programming Languages

Labels

Projects that are alternatives of or similar to regolibrary

ARMO rego library

NSA Framework

MITRE ATT&CK® Framework