forked from cncf/landscape
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathlandscape.yml
15161 lines (15118 loc) · 769 KB
/
landscape.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
landscape:
- category:
name: Provisioning
subcategories:
- subcategory:
name: Automation & Configuration
items:
- item:
name: Airship
homepage_url: https://www.airshipit.org/
repo_url: https://github.com/airshipit/treasuremap
logo: airship.svg
twitter: https://twitter.com/airshipproject
crunchbase: https://www.crunchbase.com/organization/open-infrastructure-foundation
- item:
name: Akri
homepage_url: https://docs.akri.sh
project: sandbox
repo_url: https://github.com/project-akri/akri
logo: akri.svg
twitter: https://twitter.com/ProjectAkri
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2021-09-14'
dev_stats_url: https://akri.devstats.cncf.io/
blog_url: https://medium.com/akri
artwork_url: https://github.com/cncf/artwork/blob/master/examples/sandbox.md#akri-logos
slack_url: https://kubernetes.slack.com/messages/C01D9L7QE8Z
chat_channel: '#akri'
clomonitor_name: akri
- item:
name: Ansible
homepage_url: https://www.ansible.com/
repo_url: https://github.com/ansible/ansible
logo: ansible.svg
twitter: https://twitter.com/ansible
crunchbase: https://www.crunchbase.com/organization/red-hat
- item:
name: Apollo
description: Apollo is a reliable open-source configuration management system
homepage_url: https://www.apolloconfig.com/
repo_url: https://github.com/apolloconfig/apollo
logo: apollo.svg
twitter: null
crunchbase: https://www.crunchbase.com/organization/ctrip
- item:
name: AWS CloudFormation
description: AWS CloudFormation provides a common language for you to describe and provision all the infrastructure resources in your cloud environment.
homepage_url: https://aws.amazon.com/cloudformation/
logo: aws-cloudformation.svg
twitter: https://twitter.com/awscloudformer
crunchbase: https://www.crunchbase.com/organization/amazon-web-services
- item:
name: BOSH
homepage_url: https://bosh.io/docs/
repo_url: https://github.com/cloudfoundry/bosh
logo: cloudfoundry-bosh.svg
crunchbase: https://www.crunchbase.com/organization/cloud-foundry
- item:
name: Cadence Workflow
description: Cadence is a distributed, scalable, durable, and highly available fault-oblivious stateful code platform.
homepage_url: https://cadenceworkflow.io/
repo_url: https://github.com/uber/cadence
logo: cadenceworkflow.svg
twitter: https://twitter.com/UberEng
crunchbase: https://www.crunchbase.com/organization/uber
- item:
name: CDK for Kubernetes (CDK8s)
description: CDK8s lets you define Kubernetes apps and components using familiar programming languages and object-oriented APIs.
homepage_url: https://cdk8s.io/
project: sandbox
repo_url: https://github.com/cdk8s-team/cdk8s
logo: cdk8s.svg
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2020-11-10'
dev_stats_url: https://cdk8s.devstats.cncf.io/
artwork_url: https://github.com/cncf/artwork/tree/master/projects/cdk8s
clomonitor_name: cdk8s
- item:
name: CFEngine
homepage_url: https://cfengine.com/
repo_url: https://github.com/cfengine/core
logo: cf-engine.svg
crunchbase: https://www.crunchbase.com/organization/cfengine
- item:
name: Chef Infra
homepage_url: https://www.chef.io/
repo_url: https://github.com/chef/chef
logo: chef_infra.svg
crunchbase: https://www.crunchbase.com/organization/chef
- item:
name: Cloud Custodian
homepage_url: https://cloudcustodian.io/
project: incubating
repo_url: https://github.com/cloud-custodian/cloud-custodian
logo: cloud-custodian.svg
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2020-06-25'
dev_stats_url: https://cloudcustodian.devstats.cncf.io/
incubating: '2022-09-14'
clomonitor_name: cloud-custodian
- item:
name: Cloudify
homepage_url: https://cloudify.co
repo_url: https://github.com/cloudify-cosmo/cloudify-manager
logo: cloudify.svg
crunchbase: https://www.crunchbase.com/organization/cloudify-co
- item:
name: Couler
homepage_url: https://couler-proj.github.io/couler/index.html
repo_url: https://github.com/couler-proj/couler
logo: couler.svg
twitter: https://twitter.com/CoulerProject
crunchbase: https://www.crunchbase.com/organization/ant-financial
- item:
name: DevStream
homepage_url: https://www.devstream.io/
project: sandbox
repo_url: https://github.com/devstream-io/devstream
logo: devstream.svg
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2022-06-17'
dev_stats_url: https://devstream.devstats.cncf.io/
blog_url: https://blog.devstream.io/
slack_url: https://cloud-native.slack.com/messages/devstream
clomonitor_name: devstream
- item:
name: Digital Rebar
homepage_url: https://rackn.com/rebar/
repo_url: https://github.com/digitalrebar/provision
logo: digitalrebar.svg
twitter: https://twitter.com/digitalrebar
crunchbase: https://www.crunchbase.com/organization/rackn-inc
- item:
name: Foreman
homepage_url: https://theforeman.org/
repo_url: https://github.com/theforeman/foreman
logo: foreman.svg
crunchbase: https://www.crunchbase.com/organization/foreman
- item:
name: Juju
homepage_url: https://jaas.ai/
repo_url: https://github.com/juju/juju
logo: juju.svg
twitter: https://twitter.com/ubuntu
crunchbase: https://www.crunchbase.com/organization/canonical-ltd
- item:
name: kiosk
homepage_url: https://github.com/loft-sh/kiosk
repo_url: https://github.com/loft-sh/kiosk
logo: kiosk.svg
crunchbase: https://www.crunchbase.com/organization/loft-labs
- item:
name: KubeDL
homepage_url: https://kubedl.io
project: sandbox
repo_url: https://github.com/kubedl-io/kubedl
logo: kubedl.svg
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2020-06-22'
annual_review_url: https://github.com/cncf/toc/pull/993
annual_review_date: '2023-01-12'
dev_stats_url: https://kubedl.devstats.cncf.io/
artwork_url: https://github.com/cncf/artwork/blob/master/examples/sandbox.md#kubedl-logos
slack_url: https://cloud-native.slack.com/archives/C027KH1Q71A
clomonitor_name: kubedl
- item:
name: KubeEdge
homepage_url: https://kubeedge.io/en/
project: incubating
repo_url: https://github.com/kubeedge/kubeedge
logo: kube-edge.svg
twitter: https://twitter.com/KubeEdge
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2019-03-18'
incubating: '2020-09-16'
dev_stats_url: https://kubeedge.devstats.cncf.io/
artwork_url: https://github.com/cncf/artwork/blob/master/examples/sandbox.md#kubeedge-logos
mailing_list_url: https://groups.google.com/forum/#!forum/kubeedge
slack_url: https://kubeedge.slack.com/
summary_personas: Platform Engineers
summary_tags: tag1, tag2, tag3
summary_use_case: >
KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge.It is built upon
kubernetes and provides fundamental infrastructure support for network, app. deployment and metadata synchronization between cloud and edge.
Our goal is to make an open platform to enable Edge computing, extending native containerized application orchestration capabilities to hosts at
Edge
summary_business_use_case: |
TBD
summary_release_rate: Every 3 months
summary_integrations: OpenEBS (CSI support), Calico, Cilium, SDN solutions?, Prometheus, Grafana etc.
summary_intro_url: null
clomonitor_name: kube-edge
- item:
name: Kubefirst
description: Kubernetes Platform Provisioning for Application Delivery and Infrastruction Management
homepage_url: https://docs.kubefirst.com
repo_url: https://github.com/kubefirst/kubefirst
logo: kubefirst.svg
twitter: https://twitter.com/kubefirst
crunchbase: https://www.crunchbase.com/organization/kubeshop
- item:
name: KubeZoo
homepage_url: https://kubewharf.github.io
repo_url: https://github.com/kubewharf/kubezoo
logo: kubezoo.svg
crunchbase: https://www.crunchbase.com/organization/bytedance
- item:
name: KusionStack
homepage_url: https://kusionstack.io/
repo_url: https://github.com/KusionStack/kusion
logo: kusionstack.svg
twitter: https://twitter.com/KusionStack
crunchbase: https://www.crunchbase.com/organization/ant-group
- item:
name: LinuxKit
homepage_url: https://github.com/linuxkit/linuxkit
repo_url: https://github.com/linuxkit/linuxkit
logo: linux-kit.svg
twitter: https://twitter.com/moby
crunchbase: https://www.crunchbase.com/organization/docker
- item:
name: MAAS
description: Self-service, remote installation of Windows, CentOS, ESXi and Ubuntu on real servers turns your data center into a bare-metal cloud.
homepage_url: https://maas.io/
repo_url: https://github.com/maas/maas
logo: maas.svg
crunchbase: https://www.crunchbase.com/organization/canonical-ltd
- item:
name: ManageIQ
homepage_url: https://www.manageiq.org/
repo_url: https://github.com/ManageIQ/manageiq
logo: manage-iq.svg
crunchbase: https://www.crunchbase.com/organization/manageiq
- item:
name: Metal3-io
homepage_url: https://metal3.io/
project: sandbox
logo: metal3.svg
twitter: https://twitter.com/metal3_io
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2020-09-08'
annual_review_url: https://github.com/cncf/toc/pull/958
annual_review_date: '2022-11-07'
dev_stats_url: https://metal3.devstats.cncf.io/
artwork_url: https://github.com/cncf/artwork/tree/master/projects/metal3
blog_url: https://metal3.io/blog/index.html
mailing_list_url: https://groups.google.com/g/metal3-dev
slack_url: https://kubernetes.slack.com/messages/CHD49TLE7
youtube_url: https://www.youtube.com/channel/UC_xneeYbo-Dl4g-U78xW15g/videos
clomonitor_name: metal3-io
- item:
name: Mist.io
homepage_url: https://mist.io/
repo_url: https://github.com/mistio/mist-ce
logo: mistio.svg
crunchbase: https://www.crunchbase.com/organization/mist-io
joined: '2021-02-01'
- item:
name: OpenStack
homepage_url: https://www.openstack.org/
repo_url: https://github.com/openstack/openstack
url_for_bestpractices: https://github.com/openstack
logo: open-stack.svg
crunchbase: https://www.crunchbase.com/organization/open-infrastructure-foundation
- item:
name: OpenYurt
description: An open platform that extending your native Kubernetes to edge.
homepage_url: https://openyurt.io/
project: sandbox
repo_url: https://github.com/openyurtio/openyurt
logo: openyurt.svg
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2020-09-08'
annual_review_url: https://github.com/cncf/toc/pull/755
annual_review_date: '2021-11-16'
dev_stats_url: https://openyurt.devstats.cncf.io/
clomonitor_name: openyurt
- item:
name: Pulumi
homepage_url: https://www.pulumi.com/
repo_url: https://github.com/pulumi/pulumi
logo: pulumi.svg
twitter: https://twitter.com/PulumiCorp
crunchbase: https://www.crunchbase.com/organization/pulumi-corporation
- item:
name: Puppet
homepage_url: https://puppet.com/
repo_url: https://github.com/puppetlabs/puppet
logo: puppet.svg
crunchbase: https://www.crunchbase.com/organization/puppet-labs
- item:
name: Rundeck
homepage_url: https://www.rundeck.com/open-source
repo_url: https://github.com/rundeck/rundeck
logo: rundeck.svg
crunchbase: https://www.crunchbase.com/organization/rundeck
- item:
name: SaltStack
homepage_url: https://www.vmware.com/support/acquisitions/saltstack.html
repo_url: https://github.com/saltstack/salt
logo: salt-stack.svg
twitter: https://twitter.com/Salt_Project_OS
crunchbase: https://www.crunchbase.com/organization/saltstack
- item:
name: SuperEdge
description: An edge-native container management system for edge computing
homepage_url: https://superedge.io/
project: sandbox
repo_url: https://github.com/superedge/superedge
logo: superedge.svg
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2021-09-14'
dev_stats_url: https://superedge.devstats.cncf.io
blog_url: https://superedge.io/blog/
artwork_url: https://github.com/cncf/artwork/blob/master/examples/sandbox.md#superedge-logos
slack_url: https://superedge-workspace.slack.com/
chat_channel: '#superedge-community'
clomonitor_name: superedge
- item:
name: Terraform
homepage_url: https://www.terraform.io/
repo_url: https://github.com/hashicorp/terraform
logo: terraform.svg
crunchbase: https://www.crunchbase.com/organization/hashicorp
- item:
name: Tinkerbell
homepage_url: https://tinkerbell.org/
project: sandbox
repo_url: https://github.com/tinkerbell/tink
logo: tinkerbell.svg
twitter: https://twitter.com/tinkerbell_oss
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2020-11-10'
dev_stats_url: https://tinkerbell.devstats.cncf.io/
youtube_url: https://www.youtube.com/channel/UCTzWInTQPvzH21KHS8jrq7A
slack_url: https://app.slack.com/client/T08PSQ7BQ/C01SRB41GMT
clomonitor_name: tinkerbell
- item:
name: VMware vSphere
description: >-
vSphere is the industry-leading server virtualization software and the heart of a modern SDDC, helping you run, manage, connect, and secure your
applications in a common operating environment across clouds.
homepage_url: https://www.vmware.com/products/vsphere.html
logo: vmware-vsphere.svg
twitter: https://twitter.com/VMwarevSphere
crunchbase: https://www.crunchbase.com/organization/vmware
- subcategory:
name: Container Registry
items:
- item:
name: Alibaba Cloud Container Registry (ACR)
description: >-
Alibaba Cloud Container Registry (ACR) is a cloud-native artifacts management platform that helps your team build, manage, and ship containerized
applications,
also provides vulnerability analysis, global synchronization, content trust, and more functionalities out of the box.
homepage_url: https://www.alibabacloud.com/zh/product/container-registry
logo: alibaba-cloud-container-registry.svg
crunchbase: https://www.crunchbase.com/organization/alibaba-cloud
- item:
name: Amazon Elastic Container Registry (ECR)
description: >-
Amazon Elastic Container Registry (ECR) is a fully-managed Docker container registry that makes it easy for developers to store, manage, and
deploy Docker container images.
homepage_url: https://aws.amazon.com/ecr/
logo: amazon-ecr.svg
crunchbase: https://www.crunchbase.com/organization/amazon-web-services
- item:
name: Azure Registry
description: >-
Azure Container Registry allows you to store images for all types of container deployments including DC/OS, Docker Swarm, Kubernetes, and Azure
services such as App Service, Batch, Service Fabric, and others.
homepage_url: https://azure.microsoft.com/en-us/services/container-registry/
logo: azure-registry.svg
twitter: https://twitter.com/azure
crunchbase: https://www.crunchbase.com/organization/microsoft
- item:
name: Distribution
homepage_url: https://github.com/distribution/distribution
project: sandbox
repo_url: https://github.com/distribution/distribution
logo: distribution.svg
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2021-01-26'
annual_review_url: https://github.com/cncf/toc/pull/825
annual_review_date: '2022-04-22'
clomonitor_name: distribution
- item:
name: Dragonfly
homepage_url: https://d7y.io/
project: incubating
repo_url: https://github.com/dragonflyoss/Dragonfly2
logo: dragonfly.svg
twitter: https://twitter.com/dragonfly_oss
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2018-11-13'
incubating: '2020-04-09'
dev_stats_url: https://dragonfly.devstats.cncf.io/
artwork_url: https://github.com/cncf/artwork/blob/master/examples/sandbox.md#dragonfly-logos
mailing_list_url: https://groups.google.com/g/dragonfly-developers
slack_url: https://cloud-native.slack.com/messages/dragonfly/
clomonitor_name: dragonfly
- item:
name: Google Container Registry
description: >-
Container Registry is a single place for your team to manage Docker images, perform vulnerability analysis, and decide who can access what with
fine-grained access control.
homepage_url: https://cloud.google.com/container-registry/
logo: google-container-registry.svg
twitter: https://twitter.com/GCPcloud
crunchbase: https://www.crunchbase.com/organization/google
- item:
name: Harbor
homepage_url: https://goharbor.io/
project: graduated
repo_url: https://github.com/goharbor/harbor
logo: harbor.svg
twitter: https://twitter.com/project_harbor
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2018-07-31'
incubating: '2018-11-14'
graduated: '2020-06-15'
dev_stats_url: https://harbor.devstats.cncf.io/
artwork_url: https://github.com/cncf/artwork/blob/master/examples/incubating.md#harbor-logos
stack_overflow_url: https://stackoverflow.com/questions/tagged/harbor
mailing_list_url: https://lists.cncf.io/g/harbor-users/topics
slack_url: https://cloud-native.slack.com/messages/harbor/
summary_personas: SREs, Cloud Architects, Platform Engineers, DevOps Engineer, DevOps practitioners, DevSecOps practitioners
summary_tags: registry, images, OCI, container, artefacts, vulnerability scanning, self-hosted, harbor, edge, replication
summary_use_case: >-
Harbor is an open source registry that secures artifacts with policies and role-based access control, ensures images are scanned and free from
vulnerabilities, and signs images as trusted. Can be installed on any Kubernetes environment or on a system with Docker support.
summary_business_use_case: Self-hosted container registry with multiple integrations for security and validation.
summary_release_rate: We aim to have 3 big releases per year with many patch releases in between.
summary_integrations: trivy, cosing, notary, github, gce, jfrog, snyk, clair, sysdig, oidc, ldap, ecr, acr, docker, quay, helm
summary_intro_url: https://www.youtube.com/watch?v=adfPZAyozwc
clomonitor_name: harbor
- item:
name: IBM Cloud Container Registry
description: Detect vulnerabilities before images are ever deployed to containers. Store and distribute Docker images in your managed private registry.
homepage_url: https://www.ibm.com/cloud/container-registry
logo: ibm-cloud-container-registry.svg
twitter: https://twitter.com/IBMCloud
crunchbase: https://www.crunchbase.com/organization/ibm
- item:
name: JFrog Artifactory
description: >-
Shipping updates continuously and automatically has become a critical element of any successful operation. JFrog is revolutionizing the software
world with the practice of Continuous Update, with a speed and continuity that forever changes the way organizations manage and release software.
homepage_url: https://jfrog.com/artifactory/
logo: j-frog-artifactory.svg
crunchbase: https://www.crunchbase.com/organization/jfrog-ltd
- item:
name: Kraken
homepage_url: https://eng.uber.com/introducing-kraken/
repo_url: https://github.com/uber/kraken
logo: kraken.svg
twitter: https://twitter.com/UberEng
crunchbase: https://www.crunchbase.com/organization/uber
- item:
name: Portus
homepage_url: http://port.us.org/
repo_url: https://github.com/SUSE/Portus
logo: portus.svg
crunchbase: https://www.crunchbase.com/organization/suse
- item:
name: Quay
homepage_url: https://quay.io/
repo_url: https://github.com/quay/quay
logo: quay.svg
twitter: https://twitter.com/projectquay
crunchbase: https://www.crunchbase.com/organization/red-hat
- item:
name: zot
description: Zot is an OCI-native container registry for distributing container images and OCI artifacts.
homepage_url: https://zotregistry.io/
project: sandbox
repo_url: https://github.com/project-zot/zot
logo: zot.svg
twitter: https://twitter.com/zothub
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2022-12-13'
dev_stats_url: https://zot.devstats.cncf.io/
slack_url: https://cloud-native.slack.com/archives/C03EGRE4QGH
artwork_url: https://github.com/cncf/artwork/blob/master/examples/sandbox.md#zot-logos
summary_personas: SREs, Cloud Architects, Platform Engineers, DevOps Engineer, DevOps practitioners, DevSecOps practitioners
summary_tags: registry, images, OCI, container, artifacts, vulnerability scanning, self-hosted, zot, edge, image-sync
summary_integrations: trivy, cosign, notary, github
summary_intro_url: https://zotregistry.io/latest/general/concepts/
clomonitor_name: zot
- subcategory:
name: Security & Compliance
items:
- item:
name: Airlock
homepage_url: https://www.airlock.com/
logo: airlock.svg
crunchbase: https://www.crunchbase.com/organization/airlock-security-innovation-by-ergon-informatik-ag
- item:
name: Alcide
description: Alcide provides dev-to-production security for workloads running in Kubernetes & Istio
homepage_url: https://www.alcide.io/
logo: alcide.svg
crunchbase: https://www.crunchbase.com/organization/alcide
- item:
name: Anchore
homepage_url: https://anchore.com/platform
repo_url: https://github.com/anchore/anchore-engine
logo: anchore.svg
crunchbase: https://www.crunchbase.com/organization/anchore-inc
- item:
name: Apolicy
description: >-
Apolicy fuses security and compliance into your cloud native development pipeline. Using policy-as-code, we automate risk, policy and remediation
from source to production
homepage_url: https://www.apolicy.io/
logo: apolicy.svg
crunchbase: https://www.crunchbase.com/organization/apolicy
joined: '2021-02-02'
- item:
name: Aqua
homepage_url: https://www.aquasec.com/
logo: aqua.svg
crunchbase: https://www.crunchbase.com/organization/aquasecurity
- item:
name: ARMO
homepage_url: https://www.armosec.io
logo: armo.svg
crunchbase: https://www.crunchbase.com/organization/cyber-armor
- item:
name: Aserto
description: >-
Fine-grained, policy-based, real-time authorization for APIs and microservices. Aserto is the maintainer of the Topaz and Open Policy Containers
OSS projects.
homepage_url: https://www.aserto.com
repo_url: https://github.com/aserto-dev/runtime
logo: aserto.svg
crunchbase: https://www.crunchbase.com/organization/aserto-2995
extra:
slack_url: https://www.aserto.com/slack
- item:
name: Black Duck
description: >-
Black Duck provides a comprehensive software composition analysis (SCA) solution for managing security, quality, and license compliance risk that
comes from the use of open source and third-party code in applications and containers.
homepage_url: https://www.synopsys.com/software-integrity/security-testing/software-composition-analysis.html
logo: blackduck.svg
twitter: https://twitter.com/sw_integrity
crunchbase: https://www.crunchbase.com/organization/synopsys
- item:
name: Bloombase
homepage_url: https://www.bloombase.com/
logo: bloombase.svg
crunchbase: https://www.crunchbase.com/organization/bloombase
- item:
name: Capsule8
homepage_url: https://capsule8.com/
logo: capsule8.svg
crunchbase: https://www.crunchbase.com/organization/capsule8
- item:
name: Cerbos
homepage_url: https://www.cerbos.dev/
repo_url: https://github.com/cerbos/cerbos
logo: cerbos.svg
crunchbase: https://www.crunchbase.com/organization/cerbos
- item:
name: cert-manager
homepage_url: https://cert-manager.io/
project: incubating
repo_url: https://github.com/cert-manager/cert-manager
logo: jetstack-cert-manager.svg
twitter: https://twitter.com/CertManager
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2020-11-10'
incubating: '2022-09-19'
dev_stats_url: https://certmanager.devstats.cncf.io/
summary_personas: Cluster administrators, developers, platform engineers
summary_tags: certificates, acme, letsencrypt, security, encryption, tls, ssl, x509
summary_use_case: "cert-manager\_is a powerful and extensible X.509 certificate controller for Kubernetes and OpenShift workloads. It will obtain certificates from a variety of Issuers, both popular public Issuers as well as private Issuers, and ensure the certificates are valid and up-to-date, and will attempt to renew certificates at a configured time before expiry."
summary_business_use_case: >-
Manual certificate management is an outage waiting to happen; it only takes one forgotten renewal to bring down an entire site. Automation is
therefore key to reliability, and cert-manager is the foremost tool for achieving this in Kubernetes. In addition, workloads such as service
meshes can require local certificate authorities, and cert-manager can help in issuing and controlling these key parts of infrastructure.
summary_release_rate: Major release every 2 months, with each major release supported for 4 months.
summary_integrations: >-
Linkerd, Istio, SPIFFE, Gateway API, OpenShift Routes, ACME / Let's Encrypt, Hashicorp Vault, Venafi, AWS, GCP, Azure, Cloudflare, DigitalOcean,
Akamai
summary_intro_url: https://youtu.be/yINv8RUkW-E
clomonitor_name: cert-manager
- item:
name: Chaitin Tech
homepage_url: https://www.chaitin.cn/en/
logo: ChaitinTech LOGO.svg
crunchbase: https://www.crunchbase.com/organization/chaitin-tech
- item:
name: Check Point
description: >-
Check Point Software Technologies Ltd. is a leading provider of cyber security solutions to corporate enterprises and governments globally. Check
Point protects over 100,000 organizations of all sizes.
homepage_url: https://www.checkpoint.com
logo: checkpoint.svg
twitter: https://twitter.com/CheckPointSW
crunchbase: https://www.crunchbase.com/organization/check-point
- item:
name: Checkov
description: >-
Checkov scans cloud infrastructure configurations to find misconfigurations before they are deployed. Checkov manages and analyzes infrastructure
as code (IaC) scan results across platforms such as Terraform, CloudFormation, Kubernetes, Helm, ARM Templates and Serverless framework.
homepage_url: https://www.checkov.io/
repo_url: https://github.com/bridgecrewio/checkov
logo: checkov.svg
crunchbase: https://www.crunchbase.com/organization/bridgecrew
- item:
name: Chef InSpec
homepage_url: https://community.chef.io/tools/chef-inspec
repo_url: https://github.com/inspec/inspec
logo: chef_inspec.svg
crunchbase: https://www.crunchbase.com/organization/chef
- item:
name: Clair
homepage_url: https://www.redhat.com/en/topics/containers/what-is-clair
repo_url: https://github.com/quay/clair
logo: clair.svg
twitter: https://twitter.com/coreos
crunchbase: https://www.crunchbase.com/organization/red-hat
- item:
name: CloudMatos
description: >-
Pioneering the world of self-healing, self-aware, self-sustaining, self-resilient, self-secure and intelligent remediation, MatosSphere brings a
complete cloud security and governance solution for your cloud infrastructure.
homepage_url: https://www.cloudmatos.com
repo_url: https://github.com/cloudmatos/matos
logo: cloudmatos.svg
twitter: https://twitter.com/CloudMatos
crunchbase: https://www.crunchbase.com/organization/cloudmatos
- item:
name: Confidential Containers
description: >-
Confidential Containers is an open source community working to enable cloud native confidential computing by leveraging Trusted Execution
Environments to protect containers and data.
homepage_url: https://github.com/confidential-containers
project: sandbox
repo_url: https://github.com/confidential-containers/documentation
logo: confidential-containers.svg
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2022-03-08'
dev_stats_url: https://confidentialcontainers.devstats.cncf.io/
artwork_url: https://github.com/cncf/artwork/tree/master/projects/confidential-containers
slack_url: https://cloud-native.slack.com/
chat_channel: '#confidential-containers'
clomonitor_name: confidential-containers
- item:
name: ContainerSSH
description: >-
ContainerSSH launches a new container for each SSH connection in Kubernetes, Podman or Docker. The user is transparently dropped in the container
and the container is removed when the user disconnects. Authentication and container configuration are dynamic using webhooks, no system users
required.
homepage_url: https://containerssh.io
project: sandbox
repo_url: https://github.com/containerssh/containerssh
logo: containerssh.svg
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2022-09-14'
dev_stats_url: https://containerssh.devstats.cncf.io/
artwork_url: https://github.com/cncf/artwork/tree/master/projects/containerssh
slack_url: https://cloud-native.slack.com/
chat_channel: '#containerssh'
clomonitor_name: containerssh
- item:
name: Curiefense
homepage_url: https://www.curiefense.io/
project: sandbox
repo_url: https://github.com/curiefense/curiefense
logo: curiefense.svg
twitter: https://twitter.com/curiefense
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2021-01-26'
annual_review_url: https://github.com/cncf/toc/pull/806
annual_review_date: '2022-03-16'
dev_stats_url: https://curiefense.devstats.cncf.io/
artwork_url: https://github.com/cncf/artwork/tree/master/projects/curiefense
blog_url: https://www.curiefense.io/blog
clomonitor_name: curiefense
- item:
name: Datica
homepage_url: https://datica.com/
logo: datica.svg
crunchbase: https://www.crunchbase.com/organization/datica
- item:
name: Datree
homepage_url: https://datree.io/
repo_url: https://github.com/datreeio/datree
logo: datree logo Tall - color.svg
crunchbase: https://www.crunchbase.com/organization/datree-io
- item:
name: Dex
homepage_url: https://dexidp.io/
project: sandbox
repo_url: https://github.com/dexidp/dex
logo: dex.svg
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2020-06-25'
annual_review_url: https://github.com/cncf/toc/pull/701
annual_review_date: '2021-07-30'
dev_stats_url: https://dex.devstats.cncf.io/
artwork_url: https://github.com/cncf/artwork/blob/master/examples/sandbox.md#dex-logos
clomonitor_name: dex
- item:
name: Dosec
description: Dosec Security Platform provides security protection capabilities for containers, kubernetes, microservices, serverless, and DevOps.
homepage_url: https://www.dosec.cn/
logo: dosec.svg
crunchbase: https://www.crunchbase.com/organization/dosec
- item:
name: external-secrets
homepage_url: https://external-secrets.io/
project: sandbox
repo_url: https://github.com/external-secrets/external-secrets
logo: external-secrets.svg
twitter: https://twitter.com/ExtSecretsOptr
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2022-07-26'
dev_stats_url: https://externalsecretsoperator.devstats.cncf.io/
clomonitor_name: external-secrets
- item:
name: Fairwinds Insights
homepage_url: https://fairwinds.com/insights
logo: fairwinds-insights.svg
crunchbase: https://www.crunchbase.com/organization/fairwinds
- item:
name: Falco
homepage_url: https://falco.org/
project: incubating
repo_url: https://github.com/falcosecurity/falco
logo: falco.svg
twitter: https://twitter.com/falco_org
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2018-10-10'
incubating: '2020-01-08'
dev_stats_url: https://falco.devstats.cncf.io/
artwork_url: https://github.com/cncf/artwork/blob/master/examples/incubating.md#falco-logos
slack_url: https://kubernetes.slack.com/messages/falco
summary_personas: SREs, Cloud Architects, Platform Engineers, DevOps Engineer, DevOps practitioners, DevSecOps practitioners
summary_tags: >-
Security, Go, C++, DevOps, DevSecOps, Container, Cloud native, Kubernetes, Runtime, Threat detection, Syscalls, Monitoring, Observability,
Anomaly detection, Kubernetes
summary_use_case: >-
Falco is a cloud-native runtime security project that makes it easy to consume kernel events. Falco enriches these events with additional
information from the Kubernetes platform and ecosystem as well as the rest of the cloud native stack. Falco can also be extended to other data
sources through the use of plugins. Falco offers a rich set of security rules designed for Kubernetes, Linux, and cloud native environments.
When a rule is violated in the system, Falco alerts users with details about the violation and severity.
summary_business_use_case: >-
You can think about Falco as a security camera for containers, Kubernetes and the cloud: it collects signals from hosts, containers,
orchestrators and cloud logs, and it reports suspicious or anomalous behavior. Falco provides kernel instrumentation mechanisms to detect
security events. It then enriches them with metadata pulled from the node, the container runtime and Kubernetes. This metadata is then used to
dynamically apply Falco rules based on the container name, image, orchestrator labels, orchestrator resource type, etc.
summary_release_rate: 3 times per year (end of Jan, June, Sept)
summary_integrations: Kubernetes Audit Logs, AWS Cloudtrail, GitHub Audit Events, and the 40+ outputs supported by Falcosidekick (e.g. Slack, AWS Lambda, etc)
summary_intro_url: null
clomonitor_name: falco
- item:
name: FOSSA
homepage_url: https://fossa.com/
repo_url: https://github.com/fossas/fossa-cli
logo: fossa.svg
crunchbase: https://www.crunchbase.com/organization/fossa-2
- item:
name: FOSSID
homepage_url: https://www.fossid.com/
logo: fossid.svg
crunchbase: https://www.crunchbase.com/organization/fossid
- item:
name: Fugue
description: >-
Fugue empowers cloud engineering and security teams to move faster with confidence in their cloud security. Use Fugue to secure the entire
development lifecycle—from infrastructure as code through CI/CD and runtime—using a unified policy engine powered by the Open Policy Agent (OPA),
the open source standard for policy as code.
homepage_url: https://www.fugue.co
logo: fugue.svg
twitter: https://twitter.com/FugueHQ
crunchbase: https://www.crunchbase.com/organization/luminal
- item:
name: Goldilocks
homepage_url: https://www.fairwinds.com/open-source-software
repo_url: https://github.com/FairwindsOps/goldilocks
logo: goldilocks.svg
crunchbase: https://www.crunchbase.com/organization/fairwinds
- item:
name: Grafeas
homepage_url: https://grafeas.io/
repo_url: https://github.com/grafeas/grafeas
logo: grafeas.svg
twitter: https://twitter.com/Grafeasio
crunchbase: https://www.crunchbase.com/organization/google
- item:
name: Hexa
homepage_url: https://hexaorchestration.org/
project: sandbox
repo_url: https://github.com/hexa-org/policy-orchestrator
logo: hexa.svg
twitter: https://twitter.com/HexaPolicy
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2022-07-26'
dev_stats_url: https://hexapolicyorchestrator.devstats.cncf.io/
artwork_url: https://github.com/cncf/artwork/blob/master/examples/sandbox.md#hexa-logos
clomonitor_name: hexapolicyorchestrator
- item:
name: in-toto
homepage_url: https://in-toto.io
project: incubating
repo_url: https://github.com/in-toto/in-toto
logo: in-toto.svg
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
summary_personas: Security teams, Developers, Tools Groups
summary_tags: Security, Go, Python, software supply chain
summary_use_case: >-
in-toto provides security for the software supply chain. It can cryptographically track and validate the build, version control, testing,
deployment, dependency, etc. actions that happen as you make your software. in-toto also can enforce policies over these actions, so that your
supply chain is performed in the way that you describe.
summary_business_use_case: >-
Prevents many compromises in your software supply chain from having an impact on your users. It also provides traceability so that you can
determine what happened when things go wrong. in-toto is a fundamental tool for securing the software supply chain.
summary_release_rate: >-
We are rapidly approaching a 1.0 release which is expected to be almost identical to the current 0.9 release. Following that, development will
be focused on the in-toto Attestation specification. Changes to the in-toto specifications are introduced and evaluated as in-toto Enhancements
(ITE), ensuring stability in the specifications themselves. This is a key factor as both the in-toto specification and the Attestation framework
are widely used.
summary_integrations: Datadog, GitLab, Grafeas, Jenkins, Rebuilderd, SLSA, SolarWinds, tekton-chains, Sigstore
summary_intro_url: https://in-toto.io/
accepted: '2019-08-14'
incubating: '2022-03-10'
dev_stats_url: https://intoto.devstats.cncf.io/
artwork_url: https://github.com/cncf/artwork/blob/master/examples/sandbox.md#in-toto-logos
slack_url: https://cloud-native.slack.com/messages/in-toto
clomonitor_name: in-toto
- item:
name: Keylime
description: Bootstrap & Maintain Trust on the Edge / Cloud and IoT.
homepage_url: https://keylime.dev/
project: sandbox
repo_url: https://github.com/keylime/keylime
logo: keylime.svg
twitter: https://twitter.com/KeylimeProject
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2020-09-22'
annual_review_url: https://github.com/cncf/toc/pull/959
annual_review_date: '2022-11-10'
dev_stats_url: https://keylime.devstats.cncf.io/
chat_channel: '#Keylime'
blog_url: https://keylime.dev/blog
mailing_list_url: https://keylime.groups.io/g/main
slack_url: https://cloud-native.slack.com/messages/keylime
clomonitor_name: keylime
- item:
name: KICS
description: >-
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your
infrastructure-as-code with KICS by Checkmarx.
homepage_url: https://kics.io/
repo_url: https://github.com/Checkmarx/kics
logo: kics.svg
crunchbase: https://www.crunchbase.com/organization/checkmarx
extra:
docker_url: https://hub.docker.com/r/checkmarx/kics
github_discussions_url: https://github.com/Checkmarx/kics/discussions
- item:
name: kube-bench
homepage_url: https://github.com/aquasecurity/kube-bench
repo_url: https://github.com/aquasecurity/kube-bench
logo: kube-bench.svg
crunchbase: https://www.crunchbase.com/organization/aquasecurity
- item:
name: kube-hunter
homepage_url: https://github.com/aquasecurity/kube-hunter
repo_url: https://github.com/aquasecurity/kube-hunter
logo: kube-hunter.svg
crunchbase: https://www.crunchbase.com/organization/aquasecurity
- item:
name: KubeArmor
description: >-
Runtime protection for Kubernetes & other cloud Workloads. Kubearmor provides a observability and policy enforcement system to restrict any
unwanted, malicious behaviour of cloud-native workloads at runtime.
homepage_url: https://kubearmor.io/
project: sandbox
repo_url: https://github.com/kubearmor/kubearmor
logo: kubearmor.svg
crunchbase: https://www.crunchbase.com/organization/accuknox
extra:
accepted: '2021-11-16'
dev_stats_url: https://kubearmor.devstats.cncf.io/
blog_url: https://blog.accuknox.com/tag/kubearmor/
youtube_url: https://www.youtube.com/watch?v=NS8XC78wSME
docker_url: https://hub.docker.com/r/kubearmor/kubearmor
github_discussions_url: https://github.com/kubearmor/KubeArmor/discussions
slack_url: http://kubearmor.slack.com/
chat_channel: '#kubearmor-project'
summary_personas: DevSecOps,Developers,CISO,Security Admin,System Admin
summary_tags: runtime,security,application firewall,microsegmentation
summary_use_case: Secure workloads at runtime.
summary_business_use_case: |-
1. Application Hardening
2. Continuous Monitoring
3. Inline Remediation, Attack Surface reduction
4. Network Segmentation
summary_release_rate: once every month and half
summary_intro_url: https://www.youtube.com/watch?v=NS8XC78wSME
clomonitor_name: kubearmor
- item:
name: Kubescape
description: >-
Kubescape is an open source security and compliance platform that scans clusters, Kubernetes manifest files (YAML files, and Helm charts), code
repositories, container registries and images. It detects misconfigurations according to frameworks such as the NSA-CISA, MITRE ATT&CK® and CIS,
as well as software vulnerabilities, and calculates risk scores.
homepage_url: https://kubescape.io/
project: sandbox
repo_url: https://github.com/kubescape/kubescape
logo: kubescape.svg
twitter: https://twitter.com/kubescape
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2022-12-13'
slack_url: https://cloud-native.slack.com/messages/kubescape
dev_stats_url: https://kubescape.devstats.cncf.io/
clomonitor_name: kubescape
- item:
name: Kubewarden
homepage_url: https://www.kubewarden.io
project: sandbox
repo_url: https://github.com/kubewarden/kubewarden-controller
logo: kubewarden.svg
twitter: https://twitter.com/kubewarden
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2022-06-17'
blog_url: https://kubewarden.io/blog
slack_url: https://kubernetes.slack.com/
dev_stats_url: https://kubewarden.devstats.cncf.io/
chat_channel: '#kubewarden'
clomonitor_name: kubewarden
- item:
name: Kyverno
homepage_url: https://kyverno.io/
project: incubating
repo_url: https://github.com/kyverno/kyverno
logo: kyverno.svg
twitter: https://twitter.com/kyverno
crunchbase: https://www.crunchbase.com/organization/cloud-native-computing-foundation
extra:
accepted: '2020-11-10'
incubating: '2022-07-13'
dev_stats_url: https://kyverno.devstats.cncf.io/
slack_url: https://kubernetes.slack.com/
chat_channel: '#kyverno'
summary_personas: Platform engineering,DevOps engineers,Security admins,Cluster admins,Policy authors
summary_tags: policy,policy-as-code,governance,software supply chain
summary_use_case: Pod security,Policy-as-code,Governance,Software supply chain
summary_business_use_case: >-
Policy and governance with Kyverno improves security posture by eliminating misconfigurations and promotes security best practices. It also
enables business agility by separating developer, security, and operations concerns and enables self-service automation. Finally, it increases
operational efficiency by managing and optimizing for cloud costs.
summary_release_rate: Approximately monthly for patches and quarterly for minor releases.
summary_integrations: Sigstore Cosign
summary_intro_url: https://kyverno.io/docs/introduction/
clomonitor_name: kyverno
- item:
name: Metarget
description: Metarget is a framework providing automatic constructions of vulnerable cloud native infrastructures.
homepage_url: https://github.com/Metarget/metarget
repo_url: https://github.com/Metarget/metarget
logo: metarget.svg
crunchbase: https://www.crunchbase.com/organization/nsfocus-information-technology-co
- item:
name: Mondoo
description: Cloud native infrastructure security for your entire fleet
homepage_url: https://mondoo.com
logo: mondoo.svg