gittuf is a platform-agnostic security layer for Git repositories that lets developers independently verify repository security policies.
Read more
Category: Security
19 Best Free and Open Source Linux Digital Forensics Tools
Digital forensics is a specialist art. It allows investigations to be undertaken without modifying the media.
Read more
Hakoniwa – process isolation using Linux security facilities
Hakoniwa provides Linux process isolation with namespaces, cgroups, resource limits, Landlock, seccomp and configurable filesystem access.
Read more
isolate – secure execution environment for untrusted programs
isolate securely runs untrusted Linux programs in restricted environments with namespaces, cgroups, resource limits and syscall filtering.
Read more
8 Best Free and Open Source Software Bill of Materials Tools
Discover the best free and open source tools for generating and analysing Software Bills of Materials on Linux.
Read more
8 Best Free and Open Source Linux Graphical Port Scanners
Here’s our verdict on the best graphical port scanners.
Read more
Notation – sign and verify software artifacts
Notation is a command-line tool for signing and verifying container images and other artifacts stored in OCI registries.
Read more
Syd – configurable application sandbox for Linux
Syd is a Linux application sandbox using seccomp, Landlock and namespaces to control filesystem, network and process behaviour.
Read more
in-toto – framework for software supply chain integrity
in-toto protects software supply chains by recording signed metadata for each step and checking the result against a defined layout.
Read more
cosign – sign and verify software artifacts with Sigstore
cosign signs and verifies containers, binaries and other software artifacts using Sigstore, keys, identities and transparency logs.
Read more
NsJail – process isolation and sandboxing utility
NsJail is a process isolation tool designed to run applications inside tightly controlled environments.
Read more
bubblewrap – low-level unprivileged sandboxing tool
bubblewrap is a low-level Linux sandboxing tool for constructing restricted process environments with namespaces, bind mounts and seccomp.
Read more
22 Best Free and Open Source CLI Data Hashing Tools
Hashing is the process of passing data through a formula that produces a condensed fixed-value representation, called a hash value.
Read more
10 Best Free and Open Source Graphical Data Hashing Tools
Hashing is the process of passing data through a formula to produce a condensed fixed-value representation, called a hash value.
Read more
knife – reverse engineering toolkit for binary analysis
knife is a reverse engineering toolkit for static analysis of PE, ELF and Mach-O binaries, with disassembly, triage and auditing.
Read more
sbomnix – generate Software Bills of Materials for Nix
sbomnix generates CycloneDX and SPDX Software Bills of Materials for Nix flakes and store paths, with dependency and metadata analysis.
Read more
CycloneDX CLI – command-line toolkit for BOM documents
CycloneDX CLI analyzes, converts, merges, signs, verifies and validates BOM documents, with support for CycloneDX and SPDX formats.
Read more
4 Best Free and Open Source Malware Sandboxes
Discover free and open source malware sandboxes for static and dynamic analysis of suspicious software.
Read more
Capstone – multi-architecture disassembly framework
Capstone is a lightweight multi-architecture disassembly framework with detailed instruction metadata, and numerous bindings.
Read more
bom – create, view and transform Software Bills of Materials
bom is a command-line SBOM multitool for creating, viewing and transforming SPDX documents from files, directories and container images.
Read more