Repositories list

• path-to-gitless-gitops-demo

  Public
  An end-to-end journey from basics to Gitless GitOps implementation

  kubernetessecurityoci+ 4

  kubernetessecurityocicloud-nativefluxcdkyvernoopenbao

  00 forks in controlplaneio/path-to-gitless-gitops-demo•00 stars in controlplaneio/path-to-gitless-gitops-demo•00 issues in controlplaneio/path-to-gitless-gitops-demo•11 pull request in controlplaneio/path-to-gitless-gitops-demo•Updated Oct 29, 2026Oct 29, 2026

• sandbox-probe

  Public
  Agentic sandbox enumeration: find security issues, and seed escape automation.

  securitysandboxpenetration-testing+ 7

  securitysandboxpenetration-testingred-teamautonomous-agentssecurity-researchai-securityllmgenerative-aiagentic-ai

  Go

  •

  Apache License 2.0

  •33 forks in controlplaneio/sandbox-probe•2828 stars in controlplaneio/sandbox-probe•11 issue in controlplaneio/sandbox-probe•66 pull requests in controlplaneio/sandbox-probe•Updated Oct 26, 2026Oct 26, 2026

• native-cloud

  Public
  Open Cloud-Native-Ontology

  MDX

  •

  Creative Commons Attribution 4.0 International

  •00 forks in controlplaneio/native-cloud•33 stars in controlplaneio/native-cloud•00 issues in controlplaneio/native-cloud•77 pull requests in controlplaneio/native-cloud•Updated Oct 26, 2026Oct 26, 2026

• sandbox-probe-reports

  Public
  Log of default sandbox permissions for popular coding agents using sandbox-probe

  securitysandboxpenetration-testing+ 7

  securitysandboxpenetration-testingred-teamautonomous-agentssecurity-researchai-securityllmgenerative-aiagentic-ai

  JavaScript

  •

  Apache License 2.0

  •00 forks in controlplaneio/sandbox-probe-reports•11 star in controlplaneio/sandbox-probe-reports•00 issues in controlplaneio/sandbox-probe-reports•11 pull request in controlplaneio/sandbox-probe-reports•Updated Oct 26, 2026Oct 26, 2026

• zendesk-theme

  Public
  Custom theme for ControlPlane Zendesk help centres

  JavaScript

  •

  Apache License 2.0

  •00 forks in controlplaneio/zendesk-theme•00 stars in controlplaneio/zendesk-theme•00 issues in controlplaneio/zendesk-theme•77 pull requests in controlplaneio/zendesk-theme•Updated Oct 25, 2026Oct 25, 2026

• kubesec

  Public
  Security risk analysis for Kubernetes resources

  kubernetessecuritystatic-analysis+ 2

  kubernetessecuritystatic-analysishacktoberfestsast

  Go

  •

  Apache License 2.0

  •109109 forks in controlplaneio/kubesec•1.5k1.5k stars in controlplaneio/kubesec•1818 issues in controlplaneio/kubesec•1010 pull requests in controlplaneio/kubesec•Updated Oct 8, 2026Oct 8, 2026

• netassert

  Public
  Network security testing for Kubernetes DevSecOps workflows

  Go

  •

  Apache License 2.0

  •4444 forks in controlplaneio/netassert•392392 stars in controlplaneio/netassert•11 issue in controlplaneio/netassert•00 pull requests in controlplaneio/netassert•Updated Oct 7, 2026Oct 7, 2026

• homebrew-tap

  Public
  Homebrew formulas for controlplaneio tools

  kuberneteshomebrewsecurity+ 1

  kuberneteshomebrewsecuritycontainers

  00 forks in controlplaneio/homebrew-tap•00 stars in controlplaneio/homebrew-tap•00 issues in controlplaneio/homebrew-tap•00 pull requests in controlplaneio/homebrew-tap•Updated Aug 21, 2026Aug 21, 2026

• netassertv2-packet-sniffer

  Public
  This repo houses Netassertv2 TCP/UDP Packet sniffer

  Go

  •

  Apache License 2.0

  •22 forks in controlplaneio/netassertv2-packet-sniffer•55 stars in controlplaneio/netassertv2-packet-sniffer•00 issues in controlplaneio/netassertv2-packet-sniffer•11 pull request in controlplaneio/netassertv2-packet-sniffer•Updated Jul 3, 2026Jul 3, 2026

• badrobot

  Public
  BadRobot - Operator Security Audit Tool

  Go

  •

  Apache License 2.0

  •66 forks in controlplaneio/badrobot•228228 stars in controlplaneio/badrobot•33 issues in controlplaneio/badrobot•55 pull requests in controlplaneio/badrobot•Updated Jun 9, 2026Jun 9, 2026

• threat-modelling-labs

  Public
  Labs for Threat Modelling training delivered by ControlPlane

  trainingkubernetessecurity+ 1

  trainingkubernetessecuritythreatmodelling

  Makefile

  •2121 forks in controlplaneio/threat-modelling-labs•3737 stars in controlplaneio/threat-modelling-labs•00 issues in controlplaneio/threat-modelling-labs•00 pull requests in controlplaneio/threat-modelling-labs•Updated Mar 25, 2026Mar 25, 2026

• netassertv2-l4-client

  Public
  This repo houses the Layer 4 (TCP/UDP) client used by Netassert v2

  Go

  •

  Apache License 2.0

  •22 forks in controlplaneio/netassertv2-l4-client•00 stars in controlplaneio/netassertv2-l4-client•00 issues in controlplaneio/netassertv2-l4-client•11 pull request in controlplaneio/netassertv2-l4-client•Updated Mar 12, 2026Mar 12, 2026

• getting-started-spire-openbao

  Public
  A simple demonstration of how SPIFFE and Spire can be used to issue SPIFFE Verifiable Identity Documents (SVIDs)

  kubernetessecurityidentity+ 7

  kubernetessecurityidentitycloud-nativezero-trustsecrets-managementspiffespireworkload-identityopenbao

  HCL

  •00 forks in controlplaneio/getting-started-spire-openbao•55 stars in controlplaneio/getting-started-spire-openbao•00 issues in controlplaneio/getting-started-spire-openbao•00 pull requests in controlplaneio/getting-started-spire-openbao•Updated Mar 10, 2026Mar 10, 2026

• common-cloud-controls

  Public
  FINOS Common Cloud Controls

  TypeScript

  •

  Other

  •8282 forks in controlplaneio/common-cloud-controls•11 star in controlplaneio/common-cloud-controls•00 issues in controlplaneio/common-cloud-controls•1111 pull requests in controlplaneio/common-cloud-controls•Updated Feb 14, 2026Feb 14, 2026

• tools-for-ethical-and-robust-ai-systems

  Public
  Examples, runbooks and talk material for Kubecon AI day talk: Open Source tools to empower robust and ethical AI systems

  kubernetesopen-sourcesecurity+ 7

  kubernetesopen-sourcesecuritymachine-learningcloud-nativeconference-talkai-safetyai-securityllmgenerative-ai

  Makefile

  •

  Apache License 2.0

  •00 forks in controlplaneio/tools-for-ethical-and-robust-ai-systems•11 star in controlplaneio/tools-for-ethical-and-robust-ai-systems•00 issues in controlplaneio/tools-for-ethical-and-robust-ai-systems•77 pull requests in controlplaneio/tools-for-ethical-and-robust-ai-systems•Updated Jan 7, 2026Jan 7, 2026

• research-vscode

  Public
  VSCode security research

  securityresearchstatic-analysis+ 5

  securityresearchstatic-analysisidevscodesupply-chaindeveloper-toolscloud-native

  TypeScript

  •

  Apache License 2.0

  •00 forks in controlplaneio/research-vscode•33 stars in controlplaneio/research-vscode•00 issues in controlplaneio/research-vscode•77 pull requests in controlplaneio/research-vscode•Updated Nov 18, 2025Nov 18, 2025

• .github

  Public
  Github landing page README

  00 forks in controlplaneio/.github•00 stars in controlplaneio/.github•00 issues in controlplaneio/.github•00 pull requests in controlplaneio/.github•Updated Jul 2, 2025Jul 2, 2025

• very-vulnerable

  Public
  A example deliberately vulnerable Go application and container for verifying container scanning on offsec engagements

  godockersecurity+ 7

  godockersecuritypenetration-testingvulnerabilityvulnerableoffsecdevsecopssecurity-researchcontainer-security

  Go

  •11 fork in controlplaneio/very-vulnerable•22 stars in controlplaneio/very-vulnerable•00 issues in controlplaneio/very-vulnerable•00 pull requests in controlplaneio/very-vulnerable•Updated Jun 26, 2025Jun 26, 2025

• ai-security-architecture

  Public
  Reference security architecture for AI applications

  Shell

  •

  Other

  •44 forks in controlplaneio/ai-security-architecture•1515 stars in controlplaneio/ai-security-architecture•00 issues in controlplaneio/ai-security-architecture•22 pull requests in controlplaneio/ai-security-architecture•Updated Mar 28, 2025Mar 28, 2025

• kubectl-kubesec

  Public
  Security risk analysis for Kubernetes resources

  Go

  •

  Apache License 2.0

  •3636 forks in controlplaneio/kubectl-kubesec•517517 stars in controlplaneio/kubectl-kubesec•33 issues in controlplaneio/kubectl-kubesec•99 pull requests in controlplaneio/kubectl-kubesec•Updated Jan 23, 2025Jan 23, 2025

• kubesec-webhook

  Public
  Security risk analysis for Kubernetes resources

  Go

  •

  MIT License

  •2020 forks in controlplaneio/kubesec-webhook•7676 stars in controlplaneio/kubesec-webhook•88 issues in controlplaneio/kubesec-webhook•22 pull requests in controlplaneio/kubesec-webhook•Updated Jan 23, 2025Jan 23, 2025

• PubSec-Info-Assistant

  Public
  Information Assistant, built with Azure OpenAI Service, Industry Accelerator

  Python

  •

  MIT License

  •928928 forks in controlplaneio/PubSec-Info-Assistant•00 stars in controlplaneio/PubSec-Info-Assistant•00 issues in controlplaneio/PubSec-Info-Assistant•44 pull requests in controlplaneio/PubSec-Info-Assistant•Updated Dec 12, 2024Dec 12, 2024

• tekton-training

  Public
  Sample Tekton Pipeline specification for ControlPlane training labs.

  trainingkubernetessecurity+ 7

  trainingkubernetessecuritydevopspipelinesci-cdcloud-nativedevsecopsgitopstekton

  JavaScript

  •

  Apache License 2.0

  •1414 forks in controlplaneio/tekton-training•11 star in controlplaneio/tekton-training•00 issues in controlplaneio/tekton-training•00 pull requests in controlplaneio/tekton-training•Updated Oct 16, 2024Oct 16, 2024

• simulator

  Public
  Kubernetes Security Training Platform - focusing on security mitigation

  trainingdockerkubernetes+ 7

  trainingdockerkubernetesopen-sourcesecuritypenetration-testingcloud-nativectfred-teamdevsecops

  Python

  •

  Apache License 2.0

  •9999 forks in controlplaneio/simulator•1k1k stars in controlplaneio/simulator•55 issues in controlplaneio/simulator•1313 pull requests in controlplaneio/simulator•Updated Sep 2, 2024Sep 2, 2024

• starter-ml

  Public
  Demos and investigation work supporting CP AI talks at FINOS and CNSECCON 24

  open-sourcesecuritymachine-learning+ 7

  open-sourcesecuritymachine-learningresearchcloud-nativeconference-talkdevsecopsai-securityllmgenerative-ai

  Makefile

  •

  Apache License 2.0

  •00 forks in controlplaneio/starter-ml•00 stars in controlplaneio/starter-ml•00 issues in controlplaneio/starter-ml•55 pull requests in controlplaneio/starter-ml•Updated Jul 6, 2024Jul 6, 2024

• distribution

  Public
  Enterprise Distribution for Flux CD

  CUE

  •

  GNU Affero General Public License v3.0

  •99 forks in controlplaneio/distribution•00 stars in controlplaneio/distribution•00 issues in controlplaneio/distribution•00 pull requests in controlplaneio/distribution•Updated Mar 26, 2024Mar 26, 2024

• threat-modelling-envoy-gateway-talk

  Public
  Demos and investigation work supporting the Envoy Gateway threat model

  kubernetessecurityresearch+ 7

  kubernetessecurityresearchapi-gatewaycloud-nativethreat-modelingservice-meshenvoyconference-talkdevsecops

  Shell

  •

  Apache License 2.0

  •22 forks in controlplaneio/threat-modelling-envoy-gateway-talk•22 stars in controlplaneio/threat-modelling-envoy-gateway-talk•00 issues in controlplaneio/threat-modelling-envoy-gateway-talk•55 pull requests in controlplaneio/threat-modelling-envoy-gateway-talk•Updated Oct 31, 2023Oct 31, 2023

• truffleproc

  Public
  truffleproc — hunt secrets in process memory (TruffleHog & gdb mashup)

  securitysecretsgdb+ 1

  securitysecretsgdbtrufflehog

  Shell

  •

  Apache License 2.0

  •1010 forks in controlplaneio/truffleproc•130130 stars in controlplaneio/truffleproc•11 issue in controlplaneio/truffleproc•00 pull requests in controlplaneio/truffleproc•Updated Aug 20, 2023Aug 20, 2023

• collie

  Public
  OSCAL and Kyverno Policy Demo for AWS

  Shell

  •

  Apache License 2.0

  •11 fork in controlplaneio/collie•1616 stars in controlplaneio/collie•22 issues in controlplaneio/collie•00 pull requests in controlplaneio/collie•Updated Aug 16, 2023Aug 16, 2023

• threat-modelling-zero-trust-talk

  Public
  Go

  •

  Apache License 2.0

  •00 forks in controlplaneio/threat-modelling-zero-trust-talk•1313 stars in controlplaneio/threat-modelling-zero-trust-talk•00 issues in controlplaneio/threat-modelling-zero-trust-talk•00 pull requests in controlplaneio/threat-modelling-zero-trust-talk•Updated May 2, 2023May 2, 2023