forked from cncf/landscape
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathlandscape.yml
15921 lines (15866 loc) · 824 KB
/
landscape.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
landscape:
- category:
name: Provisioning
subcategories:
- subcategory:
name: Automation & Configuration
items:
- item:
name: Airship
homepage_url: https://www.airshipit.org/
repo_url: https://github.com/airshipit/treasuremap
logo: airship.svg
twitter: https://twitter.com/airshipproject
crunchbase: https://www.crunchbase.com/organization/open-infrastructure-foundation
- item:
name: Akri
homepage_url: https://docs.akri.sh
project: sandbox
repo_url: https://github.com/project-akri/akri
logo: akri.svg
twitter: https://twitter.com/ProjectAkri
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2021-09-14'
dev_stats_url: https://akri.devstats.cncf.io/
blog_url: https://medium.com/akri
artwork_url: https://github.com/cncf/artwork/blob/master/examples/sandbox.md#akri-logos
slack_url: https://kubernetes.slack.com/messages/C01D9L7QE8Z
chat_channel: '#akri'
clomonitor_name: akri
- item:
name: Ansible
homepage_url: https://www.ansible.com/
repo_url: https://github.com/ansible/ansible
logo: ansible.svg
twitter: https://twitter.com/ansible
crunchbase: https://www.crunchbase.com/organization/red-hat
- item:
name: APIClarity
description: >-
APIClarity is a cloud API observability open-source project that provides functionality to discover and monitor any API traffic that interacts with modern applications and report suspected security weaknesses or possible abuses. Once an OpenAPI spec is either uploaded or reconstructed by APIClarity, it monitors for shadow and zombie APIs, Broken Functional-Level Authorization (BFLA), Broken Object-Level Authorization (BOLA), weak authentication, sensitive data leaks and data injection risks.
homepage_url: https://openclarity.io/
repo_url: https://github.com/openclarity/apiclarity
logo: APIClarity.svg
twitter: https://twitter.com/CiscoOpen
crunchbase: https://www.crunchbase.com/organization/cisco
extra:
blog_url: https://dev.to/ciscoemerge
- item:
name: Apollo
description: Apollo is a reliable open-source configuration management system
homepage_url: https://www.apolloconfig.com/
repo_url: https://github.com/apolloconfig/apollo
logo: apollo.svg
twitter: null
crunchbase: https://www.crunchbase.com/organization/ctrip
- item:
name: AWS CloudFormation
description: AWS CloudFormation provides a common language for you to describe and provision all the infrastructure resources in your cloud environment.
homepage_url: https://aws.amazon.com/cloudformation/
logo: aws-cloudformation.svg
twitter: https://twitter.com/awscloudformer
crunchbase: https://www.crunchbase.com/organization/amazon-web-services
- item:
name: BOSH
homepage_url: https://bosh.io/docs/
repo_url: https://github.com/cloudfoundry/bosh
logo: cloudfoundry-bosh.svg
crunchbase: https://www.crunchbase.com/organization/cloud-foundry
- item:
name: Cadence Workflow
description: Cadence is a distributed, scalable, durable, and highly available fault-oblivious stateful code platform.
homepage_url: https://cadenceworkflow.io/
repo_url: https://github.com/uber/cadence
logo: cadenceworkflow.svg
twitter: https://twitter.com/UberEng
crunchbase: https://www.crunchbase.com/organization/uber
- item:
name: CDK for Kubernetes (CDK8s)
description: CDK8s lets you define Kubernetes apps and components using familiar programming languages and object-oriented APIs.
homepage_url: https://cdk8s.io/
project: sandbox
repo_url: https://github.com/cdk8s-team/cdk8s
logo: cdk8s.svg
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2020-11-10'
annual_review_url: https://github.com/cncf/toc/pull/1024
annual_review_date: '2023-03-14'
dev_stats_url: https://cdk8s.devstats.cncf.io/
artwork_url: https://github.com/cncf/artwork/tree/master/projects/cdk8s
clomonitor_name: cdk8s
- item:
name: CFEngine
homepage_url: https://cfengine.com/
repo_url: https://github.com/cfengine/core
logo: cf-engine.svg
crunchbase: https://www.crunchbase.com/organization/cfengine
- item:
name: Chef Infra
homepage_url: https://www.chef.io/
repo_url: https://github.com/chef/chef
logo: chef_infra.svg
crunchbase: https://www.crunchbase.com/organization/chef
- item:
name: Cloud Custodian
homepage_url: https://cloudcustodian.io/
project: incubating
repo_url: https://github.com/cloud-custodian/cloud-custodian
logo: cloud-custodian.svg
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2020-06-25'
dev_stats_url: https://cloudcustodian.devstats.cncf.io/
incubating: '2022-09-14'
clomonitor_name: cloud-custodian
- item:
name: Cloudify
homepage_url: https://cloudify.co
repo_url: https://github.com/cloudify-cosmo/cloudify-manager
logo: cloudify.svg
crunchbase: https://www.crunchbase.com/organization/cloudify-co
- item:
name: Couler
homepage_url: https://couler-proj.github.io/couler/index.html
repo_url: https://github.com/couler-proj/couler
logo: couler.svg
twitter: https://twitter.com/CoulerProject
crunchbase: https://www.crunchbase.com/organization/ant-financial
- item:
name: DevStream
homepage_url: https://www.devstream.io/
project: sandbox
repo_url: https://github.com/devstream-io/devstream
logo: devstream.svg
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2022-06-17'
dev_stats_url: https://devstream.devstats.cncf.io/
blog_url: https://blog.devstream.io/
slack_url: https://cloud-native.slack.com/messages/devstream
clomonitor_name: devstream
- item:
name: Digital Rebar
homepage_url: https://rackn.com/rebar/
repo_url: https://github.com/digitalrebar/provision
logo: digitalrebar.svg
twitter: https://twitter.com/digitalrebar
crunchbase: https://www.crunchbase.com/organization/rackn-inc
- item:
name: Foreman
homepage_url: https://theforeman.org/
repo_url: https://github.com/theforeman/foreman
logo: foreman.svg
crunchbase: https://www.crunchbase.com/organization/foreman
- item:
name: Idem Project
description: Idem reduces your cloud configuration to data – for you! Instead of Infrastructure as Code, Idem delivers Infrastructure as Data. The cloud becomes simplified, easier to maintain, easier to discover, and easier to use.
homepage_url: https://www.idemproject.io
repo_url: https://www.idemproject.io/general-8
logo: idem-project.svg
twitter: https://twitter.com/idem_project
crunchbase: https://www.crunchbase.com/organization/vmware
- item:
name: Juju
homepage_url: https://jaas.ai/
repo_url: https://github.com/juju/juju
logo: juju.svg
twitter: https://twitter.com/ubuntu
crunchbase: https://www.crunchbase.com/organization/canonical-ltd
- item:
name: kiosk
homepage_url: https://github.com/loft-sh/kiosk
repo_url: https://github.com/loft-sh/kiosk
logo: kiosk.svg
crunchbase: https://www.crunchbase.com/organization/loft-labs
- item:
name: KubeClarity
description: >- KubeClarity is a tool for detecting and managing Software Bill Of Materials (SBOM) and vulnerabilities of container images and filesystems. It scans run-time Kubernetes clusters and CI/CD pipelines for enhanced software supply chain security. As the first opensource run-time scanner, it efficiently scans the run-time images used in the cluster to avoid bloat of vulnerability reports on unused images in the registry, making the scanning process significantly efficient and relevant. KubeClarity also enables multi-scanner integrations for universal SBOM composition and vulnerability scanning. VMClarity is an open-source tool for agentless detection and management of Software Bill of Materials (SBOMs) on Virtual Machines (VMs). Because it is agentless, cloud native security and observability on VMs is enhanced without writing or modifying any code.
homepage_url: https://openclarity.io/
repo_url: https://github.com/openclarity/kubeclarity
logo: KubeClarity.svg
twitter: https://twitter.com/CiscoOpen
crunchbase: https://www.crunchbase.com/organization/cisco
extra:
blog_url: https://dev.to/ciscoemerge
artwork_url: https://github.com/openclarity/kubeclarity/tree/main/images
- item:
name: KubeDL
homepage_url: https://kubedl.io
project: sandbox
repo_url: https://github.com/kubedl-io/kubedl
logo: kubedl.svg
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2020-06-22'
annual_review_url: https://github.com/cncf/toc/pull/993
annual_review_date: '2023-01-12'
dev_stats_url: https://kubedl.devstats.cncf.io/
artwork_url: https://github.com/cncf/artwork/blob/master/examples/sandbox.md#kubedl-logos
slack_url: https://cloud-native.slack.com/archives/C027KH1Q71A
clomonitor_name: kubedl
- item:
name: KubeEdge
homepage_url: https://kubeedge.io/en/
project: incubating
repo_url: https://github.com/kubeedge/kubeedge
logo: kube-edge.svg
twitter: https://twitter.com/KubeEdge
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2019-03-18'
incubating: '2020-09-16'
dev_stats_url: https://kubeedge.devstats.cncf.io/
artwork_url: https://github.com/cncf/artwork/blob/master/examples/sandbox.md#kubeedge-logos
mailing_list_url: https://groups.google.com/forum/#!forum/kubeedge
slack_url: https://kubeedge.slack.com/
summary_personas: Platform Engineers, Enterprise Operator, Application Developer
summary_tags: Edge, IoT Device
summary_use_case: >
KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge.It is built upon
kubernetes and provides fundamental infrastructure support for network, application deployment and metadata synchronization between cloud and
edge.
Our goal is to make an open platform to enable Edge computing, extending native containerized application orchestration capabilities to hosts at
Edge
summary_business_use_case: >
KubeEdge has found widespread adoption across multiple industries, including transportation, energy, internet, CDN, manufacturing, and smart
campuses. Some of the notable use cases include:
Tiansuan Constellation Program: KubeEdge has been integrated into the cloud-native satellite computing platform initiated by the Shenzhen
Institute of Beijing University of Posts and Telecommunications (BUPT) with Spacety Co., Ltd. KubeEdge brings in orbit-earth collaboration for
the Tiansuan-1 Satellite in the platform, this integration has enabled new service scenarios such as image inference, incremental deep learning,
and federated learning.
China's highway electronic toll collection (ETC) system: KubeEdge has been instrumental in managing nearly 100,000 edge nodes and over 500,000
edge applications in 29 of China's 34 provinces, municipalities, and autonomous regions. With these applications, the system processes more than
300 million data records daily and supports continuous updates of ETC services on highways. As a result, the time taken to pass through toll
stations has been reduced from 29s to 3s for trucks, and from 15s to 2s for cars.
Hong Kong-Zhuhai-Macao bridge: KubeEdge manages edge nodes deployed on the world's longest sea crossing bridge, which collects up to 14
different types of sensor data, including light intensity, carbon dioxide, atmospheric pressure, noise, temperature, humidity, PM 2.5, PM 10,
rain and snow, acceleration, angular velocity, Euler angle, magnetic field, and sound. It also enables business apps and device mapper and AI
interference programs to be deployed at the edge.
SAIC MAXUS MIFA 9: The next-generation car-cloud collaborative architecture, SAIC MAXUS full-size luxury, smart, pure electric MPV MIFA 9, has
become the first-ever vehicle with KubeEdge Inside. This platform can manage 100,000+ nodes and millions of edge devices and is based on
KubeEdge's capabilities such as lightweight architecture, optimized for unstable cloud-edge networks at scale, simplified heterogeneous IoT
device management, and edge autonomy in the case of disconnection.
CDN platform of China Telecom: KubeEdge is used to manage CDN edge nodes, automatically deploy and upgrade CDN edge services, and implement edge
service disaster recovery (DR) when migrating CDN services to the cloud.
China Mobile On-line Marketing Service Center: The largest call center in the world, with 44,000 agents, 900 million users, and 53 customer
service centers, builds a cloud-edge synergy architecture consisting of two centers and multiple edges based on KubeEdge.
Xinghai IoT: This IoT company provides comprehensive smart building solutions by leveraging a construction IoT platform, intelligent hardware,
and AI. Xinghai IoT built a smart campus with cloud-edge-device synergy based on KubeEdge and its own Xinghai IoT cloud platform, greatly
improving the efficiency of campus management. With AI assistance, nearly 30% of the repetitive work is automated.
SF Express: The largest integrated logistics service provider in China and the fourth largest in the world, completely transformed their supply
chains by implementing KubeEdge. The smart supply chain system enables edge-cloud synergy, edge data collection, real-time edge data processing,
massive IoT device management, and creates a more stable, secure, and reliable edge industrial IoT system.
summary_release_rate: Every 3 months
summary_integrations: Calico, Flannel, Containerd, CRI-O, OpenFunction, WasmEdge, Harbor, Prometheus, Grafana etc.
summary_intro_url: null
clomonitor_name: kube-edge
- item:
name: Kubefirst
description: Kubernetes Platform Provisioning for Application Delivery and Infrastruction Management
homepage_url: https://docs.kubefirst.com
repo_url: https://github.com/kubefirst/kubefirst
logo: kubefirst.svg
twitter: https://twitter.com/kubefirst
crunchbase: https://www.crunchbase.com/organization/kubeshop
- item:
name: KubeZoo
homepage_url: https://kubewharf.github.io
repo_url: https://github.com/kubewharf/kubezoo
logo: kubezoo.svg
crunchbase: https://www.crunchbase.com/organization/bytedance
- item:
name: KusionStack
homepage_url: https://kusionstack.io/
repo_url: https://github.com/KusionStack/kusion
logo: kusionstack.svg
twitter: https://twitter.com/KusionStack
crunchbase: https://www.crunchbase.com/organization/ant-group
- item:
name: KCL
description: A constraint-based record & functional language mainly used in configuration and policy scenarios.
homepage_url: https://kcl-lang.io/
repo_url: https://github.com/KusionStack/kcl
logo: kcl.svg
twitter: https://twitter.com/LangKcl54452
crunchbase: https://www.crunchbase.com/organization/ant-group
- item:
name: LinuxKit
homepage_url: https://github.com/linuxkit/linuxkit
repo_url: https://github.com/linuxkit/linuxkit
logo: linux-kit.svg
twitter: https://twitter.com/moby
crunchbase: https://www.crunchbase.com/organization/docker
- item:
name: MAAS
description: Self-service, remote installation of Windows, CentOS, ESXi and Ubuntu on real servers turns your data center into a bare-metal cloud.
homepage_url: https://maas.io/
repo_url: https://github.com/maas/maas
logo: maas.svg
crunchbase: https://www.crunchbase.com/organization/canonical-ltd
- item:
name: ManageIQ
homepage_url: https://www.manageiq.org/
repo_url: https://github.com/ManageIQ/manageiq
logo: manage-iq.svg
crunchbase: https://www.crunchbase.com/organization/manageiq
- item:
name: Meshery
homepage_url: https://meshery.io
project: sandbox
repo_url: https://github.com/meshery/meshery
logo: meshery.svg
twitter: https://twitter.com/mesheryio
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2021-06-22'
dev_stats_url: https://meshery.devstats.cncf.io/
artwork_url: https://github.com/cncf/artwork/blob/master/examples/sandbox.md#meshery-logos
blog_url: https://meshery.io/blog/
slack_url: https://cloud-native.slack.com/messages/meshery
mailing_list_url: https://groups.google.com/a/meshery.dev/g/community
youtube_url: https://www.youtube.com/playlist?list=PL3A-A6hPO2INr4oEIorJqC8N0FtxnYj0a
clomonitor_name: meshery
- item:
name: Metal³
homepage_url: https://metal3.io/
project: sandbox
repo_url: https://github.com/metal3-io/baremetal-operator
logo: metal3.svg
twitter: https://twitter.com/metal3_io
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2020-09-08'
annual_review_url: https://github.com/cncf/toc/pull/958
annual_review_date: '2022-11-07'
summary_personas: Cluster admins
summary_tags: baremetal, deployment, provisioning
summary_use_case: Provision bare metal hardware via k8s-native APIs, including integration with the Cluster API.
summary_integrations: Cluster API
dev_stats_url: https://metal3.devstats.cncf.io/
artwork_url: https://github.com/cncf/artwork/tree/master/projects/metal3
blog_url: https://metal3.io/blog/index.html
mailing_list_url: https://groups.google.com/g/metal3-dev
slack_url: https://kubernetes.slack.com/messages/CHD49TLE7
youtube_url: https://www.youtube.com/channel/UC_xneeYbo-Dl4g-U78xW15g/videos
clomonitor_name: metal3-io
- item:
name: Mist.io
homepage_url: https://mist.io/
repo_url: https://github.com/mistio/mist-ce
logo: mistio.svg
crunchbase: https://www.crunchbase.com/organization/mist-io
joined: '2021-02-01'
- item:
name: OpenStack
homepage_url: https://www.openstack.org/
repo_url: https://github.com/openstack/openstack
url_for_bestpractices: https://github.com/openstack
logo: open-stack.svg
crunchbase: https://www.crunchbase.com/organization/open-infrastructure-foundation
- item:
name: OpenYurt
description: An open platform that extending your native Kubernetes to edge.
homepage_url: https://openyurt.io/
project: sandbox
repo_url: https://github.com/openyurtio/openyurt
logo: openyurt.svg
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2020-09-08'
annual_review_url: https://github.com/cncf/toc/pull/755
annual_review_date: '2021-11-16'
dev_stats_url: https://openyurt.devstats.cncf.io/
clomonitor_name: openyurt
- item:
name: Pulumi
homepage_url: https://www.pulumi.com/
repo_url: https://github.com/pulumi/pulumi
logo: pulumi.svg
twitter: https://twitter.com/PulumiCorp
crunchbase: https://www.crunchbase.com/organization/pulumi-corporation
- item:
name: Puppet
homepage_url: https://puppet.com/
repo_url: https://github.com/puppetlabs/puppet
logo: puppet.svg
crunchbase: https://www.crunchbase.com/organization/puppet-labs
- item:
name: Rundeck
homepage_url: https://www.rundeck.com/open-source
repo_url: https://github.com/rundeck/rundeck
logo: rundeck.svg
crunchbase: https://www.crunchbase.com/organization/rundeck
- item:
name: Salt Project
homepage_url: https://www.saltproject.io
repo_url: https://github.com/saltstack/salt
logo: salt-project.svg
twitter: https://twitter.com/Salt_Project_OS
crunchbase: https://www.crunchbase.com/organization/vmware
- item:
name: Shifu
description: Shifu is the next generation cloud native IoT development framework that could 10X your IoT software development
homepage_url: https://shifu.dev/
repo_url: https://github.com/edgenesis/shifu
logo: shifu.svg
twitter: https://twitter.com/ShifuFramework
crunchbase: https://www.crunchbase.com/organization/edgenesis
- item:
name: SuperEdge
description: An edge-native container management system for edge computing
homepage_url: https://superedge.io/
project: sandbox
repo_url: https://github.com/superedge/superedge
logo: superedge.svg
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2021-09-14'
dev_stats_url: https://superedge.devstats.cncf.io
blog_url: https://superedge.io/blog/
artwork_url: https://github.com/cncf/artwork/blob/master/examples/sandbox.md#superedge-logos
slack_url: https://superedge-workspace.slack.com/
chat_channel: '#superedge-community'
clomonitor_name: superedge
- item:
name: Terraform
homepage_url: https://www.terraform.io/
repo_url: https://github.com/hashicorp/terraform
logo: terraform.svg
crunchbase: https://www.crunchbase.com/organization/hashicorp
- item:
name: Tinkerbell
homepage_url: https://tinkerbell.org/
project: sandbox
repo_url: https://github.com/tinkerbell/tink
logo: tinkerbell.svg
twitter: https://twitter.com/tinkerbell_oss
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2020-11-10'
dev_stats_url: https://tinkerbell.devstats.cncf.io/
youtube_url: https://www.youtube.com/channel/UCTzWInTQPvzH21KHS8jrq7A
slack_url: https://app.slack.com/client/T08PSQ7BQ/C01SRB41GMT
clomonitor_name: tinkerbell
- item:
name: VMClarity
description: >-
VMClarity is an open-source tool for agentless detection and management of Software Bill of Materials (SBOMs) on Virtual Machines (VMs). Because it is agentless, cloud native security and observability on VMs is enhanced without writing or modifying any code.
homepage_url: https://openclarity.io/
repo_url: https://github.com/openclarity/vmclarity
logo: VMClarity.svg
twitter: https://twitter.com/CiscoOpen
crunchbase: https://www.crunchbase.com/organization/cisco
extra:
blog_url: https://dev.to/ciscoemerge
artwork_url: https://github.com/openclarity/vmclarity/tree/main/img
summary_use_case: >-
There are good open source and commercial-based solutions for providing threat detection for virtual machines, but challenges come with assembling these yourself.
Cloud and container environments are complex with installation, configuration, and reporting.
Integrating with existing deployment automation is always a consideration with any addition to a cloud native environment
Siloed reporting and visualization and a lack of a single view into your configuration
summary_business_use_case: >-
Virtual machines (VM’s) are the number one most used service on AWS, Azure and GCP and the predominate method for hosting containers. Despite this extensive use, VM’s are vulnerable to muyltiple threats incluyding leaked secrets and passwords, malware, system misconfiguration, and rootkit software used by cybercriminals to gain control over a target computer or network.
summary_release_rate: Every 3 months
- item:
name: VMware vSphere
description: >-
vSphere is the industry-leading server virtualization software and the heart of a modern SDDC, helping you run, manage, connect, and secure your
applications in a common operating environment across clouds.
homepage_url: https://www.vmware.com/products/vsphere.html
logo: vmware-vsphere.svg
twitter: https://twitter.com/VMwarevSphere
crunchbase: https://www.crunchbase.com/organization/vmware
- subcategory:
name: Container Registry
items:
- item:
name: Alibaba Cloud Container Registry (ACR)
description: >-
Alibaba Cloud Container Registry (ACR) is a cloud-native artifacts management platform that helps your team build, manage, and ship containerized
applications,
also provides vulnerability analysis, global synchronization, content trust, and more functionalities out of the box.
homepage_url: https://www.alibabacloud.com/zh/product/container-registry
logo: alibaba-cloud-container-registry.svg
crunchbase: https://www.crunchbase.com/organization/alibaba-cloud
- item:
name: Amazon Elastic Container Registry (ECR)
description: >-
Amazon Elastic Container Registry (ECR) is a fully-managed Docker container registry that makes it easy for developers to store, manage, and
deploy Docker container images.
homepage_url: https://aws.amazon.com/ecr/
logo: amazon-ecr.svg
crunchbase: https://www.crunchbase.com/organization/amazon-web-services
- item:
name: Azure Registry
description: >-
Azure Container Registry allows you to store images for all types of container deployments including DC/OS, Docker Swarm, Kubernetes, and Azure
services such as App Service, Batch, Service Fabric, and others.
homepage_url: https://azure.microsoft.com/en-us/services/container-registry/
logo: azure-registry.svg
twitter: https://twitter.com/azure
crunchbase: https://www.crunchbase.com/organization/microsoft
- item:
name: Distribution
homepage_url: https://github.com/distribution/distribution
project: sandbox
repo_url: https://github.com/distribution/distribution
logo: distribution.svg
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2021-01-26'
annual_review_url: https://github.com/cncf/toc/pull/825
annual_review_date: '2022-04-22'
clomonitor_name: distribution
- item:
name: Dragonfly
homepage_url: https://d7y.io/
project: incubating
repo_url: https://github.com/dragonflyoss/Dragonfly2
logo: dragonfly.svg
twitter: https://twitter.com/dragonfly_oss
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2018-11-13'
incubating: '2020-04-09'
dev_stats_url: https://dragonfly.devstats.cncf.io/
artwork_url: https://github.com/cncf/artwork/blob/master/examples/sandbox.md#dragonfly-logos
mailing_list_url: https://groups.google.com/g/dragonfly-developers
slack_url: https://cloud-native.slack.com/messages/dragonfly/
summary_personas: SREs, Cloud Architects, Platform Engineers, DevOps Engineer, DevOps practitioners, DevSecOps practitioners
summary_tags: image acceleration, file distribution, images, OCI, container, artefacts, registry, cloud native, p2p, dragonfly, d7y, nydus
summary_use_case: >-
Provide efficient, stable, securefile distribution and image acceleration based on p2p technology to be the best practice and standard solution
in cloud native architectures. It is widely used in the fields of image distribution, file distribution, log distribution, inference model
distribution, etc.
summary_business_use_case: >-
Reduce back-to-source download traffic and back-to-source requests, improve node idle bandwidth utilization. Solve the problem of insufficient
bandwidth or overload to download resources when accessing centralized container registry or file service in large-scale Kubernetes cluster.
Based on P2P technology, reduce the bandwidth and load of container registry or file service, and accelerate the download speed of images or
files.
summary_release_rate: Major release every 2 months.
summary_integrations: >-
Harbor, Docker, Containerd, CRI-O, Podman, ORAS, Nydus, eStargz, HDFS, AWS S3, Google GCS, Azure Blob, Aliyun OSS, HWC OBS, TensorFlow Serving,
Triton Server, TorchServe
summary_intro_url: https://www.youtube.com/watch?v=TsECBaAvm-g
clomonitor_name: dragonfly
- item:
name: Google Container Registry
description: >-
Container Registry is a single place for your team to manage Docker images, perform vulnerability analysis, and decide who can access what with
fine-grained access control.
homepage_url: https://cloud.google.com/container-registry/
logo: google-container-registry.svg
twitter: https://twitter.com/GCPcloud
crunchbase: https://www.crunchbase.com/organization/google
- item:
name: Harbor
homepage_url: https://goharbor.io/
project: graduated
repo_url: https://github.com/goharbor/harbor
logo: harbor.svg
twitter: https://twitter.com/project_harbor
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2018-07-31'
incubating: '2018-11-14'
graduated: '2020-06-15'
dev_stats_url: https://harbor.devstats.cncf.io/
artwork_url: https://github.com/cncf/artwork/blob/master/examples/incubating.md#harbor-logos
stack_overflow_url: https://stackoverflow.com/questions/tagged/harbor
mailing_list_url: https://lists.cncf.io/g/harbor-users/topics
slack_url: https://cloud-native.slack.com/messages/harbor/
summary_personas: SREs, Cloud Architects, Platform Engineers, DevOps Engineer, DevOps practitioners, DevSecOps practitioners
summary_tags: registry, images, OCI, container, artefacts, vulnerability scanning, self-hosted, harbor, edge, replication
summary_use_case: >-
Harbor is an open source registry that secures artifacts with policies and role-based access control, ensures images are scanned and free from
vulnerabilities, and signs images as trusted. Can be installed on any Kubernetes environment or on a system with Docker support.
summary_business_use_case: Self-hosted container registry with multiple integrations for security and validation.
summary_release_rate: We aim to have 3 big releases per year with many patch releases in between.
summary_integrations: trivy, cosing, notary, github, gce, jfrog, snyk, clair, sysdig, oidc, ldap, ecr, acr, docker, quay, helm
summary_intro_url: https://www.youtube.com/watch?v=adfPZAyozwc
clomonitor_name: harbor
- item:
name: IBM Cloud Container Registry
description: Detect vulnerabilities before images are ever deployed to containers. Store and distribute Docker images in your managed private registry.
homepage_url: https://www.ibm.com/cloud/container-registry
logo: ibm-cloud-container-registry.svg
twitter: https://twitter.com/IBMCloud
crunchbase: https://www.crunchbase.com/organization/ibm
- item:
name: JFrog Artifactory
description: >-
Shipping updates continuously and automatically has become a critical element of any successful operation. JFrog is revolutionizing the software
world with the practice of Continuous Update, with a speed and continuity that forever changes the way organizations manage and release software.
homepage_url: https://jfrog.com/artifactory/
logo: j-frog-artifactory.svg
crunchbase: https://www.crunchbase.com/organization/jfrog-ltd
- item:
name: Kraken
homepage_url: https://eng.uber.com/introducing-kraken/
repo_url: https://github.com/uber/kraken
logo: kraken.svg
twitter: https://twitter.com/UberEng
crunchbase: https://www.crunchbase.com/organization/uber
- item:
name: Portus
homepage_url: http://port.us.org/
repo_url: https://github.com/SUSE/Portus
logo: portus.svg
crunchbase: https://www.crunchbase.com/organization/suse
- item:
name: Quay
homepage_url: https://quay.io/
repo_url: https://github.com/quay/quay
logo: quay.svg
twitter: https://twitter.com/projectquay
crunchbase: https://www.crunchbase.com/organization/red-hat
- item:
name: zot
description: Zot is an OCI-native container registry for distributing container images and OCI artifacts.
homepage_url: https://zotregistry.io/
project: sandbox
repo_url: https://github.com/project-zot/zot
logo: zot.svg
twitter: https://twitter.com/zothub
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2022-12-13'
dev_stats_url: https://zot.devstats.cncf.io/
slack_url: https://cloud-native.slack.com/archives/C03EGRE4QGH
artwork_url: https://github.com/cncf/artwork/blob/master/examples/sandbox.md#zot-logos
summary_personas: SREs, Cloud Architects, Platform Engineers, DevOps Engineer, DevOps practitioners, DevSecOps practitioners
summary_tags: registry, images, OCI, container, artifacts, vulnerability scanning, self-hosted, zot, edge, image-sync
summary_integrations: trivy, cosign, notary, github
summary_intro_url: https://zotregistry.io/latest/general/concepts/
clomonitor_name: zot
- subcategory:
name: Security & Compliance
items:
- item:
name: Airlock
homepage_url: https://www.airlock.com/
logo: airlock.svg
crunchbase: https://www.crunchbase.com/organization/airlock-security-innovation-by-ergon-informatik-ag
- item:
name: Alcide
description: Alcide provides dev-to-production security for workloads running in Kubernetes & Istio
homepage_url: https://www.alcide.io/
logo: alcide.svg
crunchbase: https://www.crunchbase.com/organization/alcide
- item:
name: Anchore
homepage_url: https://anchore.com/platform
repo_url: https://github.com/anchore/anchore-engine
logo: anchore.svg
crunchbase: https://www.crunchbase.com/organization/anchore-inc
- item:
name: APIClarity
description: >-
APIClarity is a cloud API observability open-source project that provides functionality to discover and monitor any API traffic that interacts
with modern applications and report suspected security weaknesses or possible abuses. Once an OpenAPI spec is either uploaded or reconstructed by
APIClarity, it monitors for shadow and zombie APIs, Broken Functional-Level Authorization (BFLA), Broken Object-Level Authorization (BOLA), weak
authentication, sensitive data leaks and data injection risks.
homepage_url: https://openclarity.io/
repo_url: https://github.com/openclarity/apiclarity
logo: APIClarity.svg
twitter: https://twitter.com/CiscoOpen
crunchbase: https://www.crunchbase.com/organization/cisco
extra:
blog_url: https://dev.to/ciscoemerge
- item:
name: Apolicy
description: >-
Apolicy fuses security and compliance into your cloud native development pipeline. Using policy-as-code, we automate risk, policy and remediation
from source to production
homepage_url: https://www.apolicy.io/
logo: apolicy.svg
crunchbase: https://www.crunchbase.com/organization/apolicy
joined: '2021-02-02'
- item:
name: Aqua
homepage_url: https://www.aquasec.com/
logo: aqua.svg
crunchbase: https://www.crunchbase.com/organization/aquasecurity
- item:
name: ARMO
homepage_url: https://www.armosec.io
logo: armo.svg
crunchbase: https://www.crunchbase.com/organization/cyber-armor
- item:
name: Aserto
description: >-
Fine-grained, policy-based, real-time authorization for APIs and microservices. Aserto is the maintainer of the Topaz and Open Policy Containers
OSS projects.
homepage_url: https://www.aserto.com
repo_url: https://github.com/aserto-dev/runtime
logo: aserto.svg
crunchbase: https://www.crunchbase.com/organization/aserto-2995
extra:
slack_url: https://www.aserto.com/slack
- item:
name: Black Duck
description: >-
Black Duck provides a comprehensive software composition analysis (SCA) solution for managing security, quality, and license compliance risk that
comes from the use of open source and third-party code in applications and containers.
homepage_url: https://www.synopsys.com/software-integrity/security-testing/software-composition-analysis.html
logo: blackduck.svg
twitter: https://twitter.com/sw_integrity
crunchbase: https://www.crunchbase.com/organization/synopsys
- item:
name: Bloombase
homepage_url: https://www.bloombase.com/
logo: bloombase.svg
crunchbase: https://www.crunchbase.com/organization/bloombase
- item:
name: Capsule8
homepage_url: https://capsule8.com/
logo: capsule8.svg
crunchbase: https://www.crunchbase.com/organization/capsule8
- item:
name: Cerbos
homepage_url: https://www.cerbos.dev/
repo_url: https://github.com/cerbos/cerbos
logo: cerbos.svg
crunchbase: https://www.crunchbase.com/organization/cerbos
- item:
name: cert-manager
homepage_url: https://cert-manager.io/
project: incubating
repo_url: https://github.com/cert-manager/cert-manager
logo: jetstack-cert-manager.svg
twitter: https://twitter.com/CertManager
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2020-11-10'
incubating: '2022-09-19'
dev_stats_url: https://certmanager.devstats.cncf.io/
summary_personas: Cluster administrators, developers, platform engineers
summary_tags: certificates, acme, letsencrypt, security, encryption, tls, ssl, x509
summary_use_case: "cert-manager\_is a powerful and extensible X.509 certificate controller for Kubernetes and OpenShift workloads. It will obtain certificates from a variety of Issuers, both popular public Issuers as well as private Issuers, and ensure the certificates are valid and up-to-date, and will attempt to renew certificates at a configured time before expiry."
summary_business_use_case: >-
Manual certificate management is an outage waiting to happen; it only takes one forgotten renewal to bring down an entire site. Automation is
therefore key to reliability, and cert-manager is the foremost tool for achieving this in Kubernetes. In addition, workloads such as service
meshes can require local certificate authorities, and cert-manager can help in issuing and controlling these key parts of infrastructure.
summary_release_rate: Major release every 2 months, with each major release supported for 4 months.
summary_integrations: >-
Linkerd, Istio, SPIFFE, Gateway API, OpenShift Routes, ACME / Let's Encrypt, Hashicorp Vault, Venafi, AWS, GCP, Azure, Cloudflare, DigitalOcean,
Akamai
summary_intro_url: https://youtu.be/yINv8RUkW-E
clomonitor_name: cert-manager
- item:
name: Chaitin Tech
homepage_url: https://www.chaitin.cn/en/
logo: ChaitinTech LOGO.svg
crunchbase: https://www.crunchbase.com/organization/chaitin-tech
- item:
name: Check Point
description: >-
Check Point Software Technologies Ltd. is a leading provider of cyber security solutions to corporate enterprises and governments globally. Check
Point protects over 100,000 organizations of all sizes.
homepage_url: https://www.checkpoint.com
logo: checkpoint.svg
twitter: https://twitter.com/CheckPointSW
crunchbase: https://www.crunchbase.com/organization/check-point
- item:
name: Checkov
description: >-
Checkov scans cloud infrastructure configurations to find misconfigurations before they are deployed. Checkov manages and analyzes infrastructure
as code (IaC) scan results across platforms such as Terraform, CloudFormation, Kubernetes, Helm, ARM Templates and Serverless framework.
homepage_url: https://www.checkov.io/
repo_url: https://github.com/bridgecrewio/checkov
logo: checkov.svg
crunchbase: https://www.crunchbase.com/organization/bridgecrew
- item:
name: Chef InSpec
homepage_url: https://community.chef.io/tools/chef-inspec
repo_url: https://github.com/inspec/inspec
logo: chef_inspec.svg
crunchbase: https://www.crunchbase.com/organization/chef
- item:
name: Clair
homepage_url: https://www.redhat.com/en/topics/containers/what-is-clair
repo_url: https://github.com/quay/clair
logo: clair.svg
twitter: https://twitter.com/coreos
crunchbase: https://www.crunchbase.com/organization/red-hat
- item:
name: CloudMatos
description: >-
Pioneering the world of self-healing, self-aware, self-sustaining, self-resilient, self-secure and intelligent remediation, MatosSphere brings a
complete cloud security and governance solution for your cloud infrastructure.
homepage_url: https://www.cloudmatos.com
repo_url: https://github.com/cloudmatos/matos
logo: cloudmatos.svg
twitter: https://twitter.com/CloudMatos
crunchbase: https://www.crunchbase.com/organization/cloudmatos
- item:
name: Confidential Containers
description: >-
Confidential Containers is an open source community working to enable cloud native confidential computing by leveraging Trusted Execution
Environments to protect containers and data.
homepage_url: https://github.com/confidential-containers
project: sandbox
repo_url: https://github.com/confidential-containers/documentation
logo: confidential-containers.svg
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2022-03-08'
dev_stats_url: https://confidentialcontainers.devstats.cncf.io/
artwork_url: https://github.com/cncf/artwork/tree/master/projects/confidential-containers
slack_url: https://cloud-native.slack.com/
chat_channel: '#confidential-containers'
clomonitor_name: confidential-containers
- item:
name: ContainerSSH
description: >-
ContainerSSH launches a new container for each SSH connection in Kubernetes, Podman or Docker. The user is transparently dropped in the container
and the container is removed when the user disconnects. Authentication and container configuration are dynamic using webhooks, no system users
required.
homepage_url: https://containerssh.io
project: sandbox
repo_url: https://github.com/containerssh/containerssh
logo: containerssh.svg
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2022-09-14'
dev_stats_url: https://containerssh.devstats.cncf.io/
artwork_url: https://github.com/cncf/artwork/tree/master/projects/containerssh
slack_url: https://cloud-native.slack.com/
chat_channel: '#containerssh'
clomonitor_name: containerssh
- item:
name: Curiefense
homepage_url: https://www.curiefense.io/
project: sandbox
repo_url: https://github.com/curiefense/curiefense
logo: curiefense.svg
twitter: https://twitter.com/curiefense
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2021-01-26'
annual_review_url: https://github.com/cncf/toc/pull/806
annual_review_date: '2022-03-16'
dev_stats_url: https://curiefense.devstats.cncf.io/
artwork_url: https://github.com/cncf/artwork/tree/master/projects/curiefense
blog_url: https://www.curiefense.io/blog
clomonitor_name: curiefense
- item:
name: Datica
homepage_url: https://datica.com/
logo: datica.svg
crunchbase: https://www.crunchbase.com/organization/datica
- item:
name: Datree
homepage_url: https://datree.io/
repo_url: https://github.com/datreeio/datree
logo: datree logo Tall - color.svg
crunchbase: https://www.crunchbase.com/organization/datree-io
- item:
name: Dex
homepage_url: https://dexidp.io/
project: sandbox
repo_url: https://github.com/dexidp/dex
logo: dex.svg
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2020-06-25'
annual_review_url: https://github.com/cncf/toc/pull/701
annual_review_date: '2021-07-30'
dev_stats_url: https://dex.devstats.cncf.io/
artwork_url: https://github.com/cncf/artwork/blob/master/examples/sandbox.md#dex-logos
clomonitor_name: dex
- item:
name: Dosec
description: Dosec Security Platform provides security protection capabilities for containers, kubernetes, microservices, serverless, and DevOps.
homepage_url: https://www.dosec.cn/
logo: dosec.svg
crunchbase: https://www.crunchbase.com/organization/dosec
- item:
name: EJBCA Community
homepage_url: https://www.ejbca.org/
repo_url: https://github.com/Keyfactor/ejbca-ce
logo: ejbca-community.svg
twitter: https://twitter.com/KeyfactorComm
crunchbase: https://www.crunchbase.com/organization/certified-security-solutions
description: EJBCA is one of the longest running open source CA software projects.
extra:
youtube_url: https://www.youtube.com/@KeyfactorCommunity/
github_discussions_url: https://github.com/Keyfactor/ejbca-ce/discussions
- item:
name: external-secrets
homepage_url: https://external-secrets.io/
project: sandbox
repo_url: https://github.com/external-secrets/external-secrets
logo: external-secrets.svg
twitter: https://twitter.com/ExtSecretsOptr
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2022-07-26'
dev_stats_url: https://externalsecretsoperator.devstats.cncf.io/
clomonitor_name: external-secrets
- item:
name: Fairwinds Insights
homepage_url: https://fairwinds.com/insights
logo: fairwinds-insights.svg
crunchbase: https://www.crunchbase.com/organization/fairwinds
- item:
name: Falco
homepage_url: https://falco.org/
project: incubating
repo_url: https://github.com/falcosecurity/falco
logo: falco.svg
twitter: https://twitter.com/falco_org
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2018-10-10'
incubating: '2020-01-08'
dev_stats_url: https://falco.devstats.cncf.io/
artwork_url: https://github.com/cncf/artwork/blob/master/examples/incubating.md#falco-logos
slack_url: https://kubernetes.slack.com/messages/falco
summary_personas: SREs, Cloud Architects, Platform Engineers, DevOps Engineer, DevOps practitioners, DevSecOps practitioners
summary_tags: >-
Security, Go, C++, DevOps, DevSecOps, Container, Cloud native, Kubernetes, Runtime, Threat detection, Syscalls, Monitoring, Observability,
Anomaly detection, Kubernetes
summary_use_case: >-
Falco is a cloud-native runtime security project that makes it easy to consume kernel events. Falco enriches these events with additional
information from the Kubernetes platform and ecosystem as well as the rest of the cloud native stack. Falco can also be extended to other data
sources through the use of plugins. Falco offers a rich set of security rules designed for Kubernetes, Linux, and cloud native environments.
When a rule is violated in the system, Falco alerts users with details about the violation and severity.
summary_business_use_case: >-
You can think about Falco as a security camera for containers, Kubernetes and the cloud: it collects signals from hosts, containers,
orchestrators and cloud logs, and it reports suspicious or anomalous behavior. Falco provides kernel instrumentation mechanisms to detect
security events. It then enriches them with metadata pulled from the node, the container runtime and Kubernetes. This metadata is then used to
dynamically apply Falco rules based on the container name, image, orchestrator labels, orchestrator resource type, etc.
summary_release_rate: 3 times per year (end of Jan, June, Sept)
summary_integrations: Kubernetes Audit Logs, AWS Cloudtrail, GitHub Audit Events, and the 40+ outputs supported by Falcosidekick (e.g. Slack, AWS Lambda, etc)
summary_intro_url: null
clomonitor_name: falco
- item:
name: FOSSA
homepage_url: https://fossa.com/
repo_url: https://github.com/fossas/fossa-cli
logo: fossa.svg
crunchbase: https://www.crunchbase.com/organization/fossa-2
- item:
name: FOSSID
homepage_url: https://www.fossid.com/
logo: fossid.svg
crunchbase: https://www.crunchbase.com/organization/fossid
- item:
name: Fugue
description: >-
Fugue empowers cloud engineering and security teams to move faster with confidence in their cloud security. Use Fugue to secure the entire
development lifecycle—from infrastructure as code through CI/CD and runtime—using a unified policy engine powered by the Open Policy Agent (OPA),
the open source standard for policy as code.
homepage_url: https://www.fugue.co
logo: fugue.svg
twitter: https://twitter.com/FugueHQ
crunchbase: https://www.crunchbase.com/organization/luminal
- item:
name: Goldilocks
homepage_url: https://www.fairwinds.com/open-source-software
repo_url: https://github.com/FairwindsOps/goldilocks
logo: goldilocks.svg
crunchbase: https://www.crunchbase.com/organization/fairwinds
- item:
name: Grafeas
homepage_url: https://grafeas.io/
repo_url: https://github.com/grafeas/grafeas
logo: grafeas.svg
twitter: https://twitter.com/Grafeasio
crunchbase: https://www.crunchbase.com/organization/google
- item:
name: Hexa
homepage_url: https://hexaorchestration.org/
project: sandbox
repo_url: https://github.com/hexa-org/policy-orchestrator
logo: hexa.svg
twitter: https://twitter.com/HexaPolicy
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2022-07-26'
dev_stats_url: https://hexapolicyorchestrator.devstats.cncf.io/
artwork_url: https://github.com/cncf/artwork/blob/master/examples/sandbox.md#hexa-logos
clomonitor_name: hexapolicyorchestrator
- item:
name: in-toto
homepage_url: https://in-toto.io
project: incubating
repo_url: https://github.com/in-toto/in-toto