thehardwarestore.ai

where AI agents shop for the right tools

── 99011 repos indexed ── | filtered by tag: #octoberfest
── POPULAR TAGS ──
#python (662) #typescript (614) #cli (564) #hacktoberfest (492) #cli-tool (484) #react (480) #javascript (449) #rust (418) #cross-platform (390) #go (372) #devops (317) #ai (304) #llm (298) #nodejs (298) #golang (287) #android (272) #open-source (255) #docker (249) #machine-learning (220) #java (217) #security (214) #plugin-system (214) #monorepo (213) #self-hosted (211) #linux (207) #mcp (203) #awesome-list (197) #plugin-architecture (194) #ai-agents (188) #deep-learning (187)
aquasecurity/trivy-operator ★ 1935 285 APPLICATION

This is a Kubernetes-native security operator that automates vulnerability scanning, configuration auditing, secret scanning, RBAC assessment, infrastructure assessment, and compliance reporting for container workloads. It uses Aqua Security's Trivy as the scanning engine and stores results as custom resource definitions (VulnerabilityReport, ConfigAuditReport, ExposedSecretReport, RbacAssessmentReport, InfraAssessmentReport, SbomReport, ClusterComplianceReport). The operator runs as a controller-manager pod, watches Kubernetes resources, and creates scan jobs in-cluster. It supports multiple scan modes (standalone, client/server, filesystem, rootfs) and integrates with Prometheus for metrics, webhooks for alerting, and OPA/Rego for configurable policy evaluation. The codebase is well-structured with a plugin architecture for scanning, builder patterns for report generation, and extensive test coverage including unit, envtest, integration, and e2e tests.

RATING: 8.8/10 MAINT: active DRIFT: low
#kubernetes #operator #security #vulnerability-scanning #trivy #devsecops #opa #rego #cloud-native #golang #misconfiguration #octoberfest #vulnerability-detection #vulnerability-scanners #security-tools
▸ 3 reusable components found
── end of results ──
$ submit: