AI Agent Skills

Hunt CI/CD pipeline vulnerabilities — GitHub Actions workflow injection (pull_request_target Pwnrequest + ${{ }}-into-shell), self-hosted runner poisoning, OIDC trust-po…

Unified Policy as Code

Write tests against structured configuration data using the Open Policy Agent Rego query language

AI API identity gateway — reverse proxy that normalizes device fingerprints and telemetry for privacy-preserving API proxying

a lightweight, security focused, BDD test framework against terraform.

Paaster is a secure and user-friendly pastebin application that prioritizes privacy and simplicity. With end-to-end encryption and paste history, Paaster ensures that yo…

Pike is a tool for determining the permissions or policy required for IAC code

Small tool to convert an IAM Policy in JSON format into a Terraform aws_iam_policy_document

The Janssen Project is a home for open source IAM components, featuring Auth Server (OAuth/OpenID), Agama low-code identity orchestration, and the Cedarling policy decis…

Info about many of my Terraform, AWS, DevOps, and AI (tada!) projects.

An open source, cloud-native security to protect everything from build to runtime

HummerRisk 是云原生安全平台，包括混合云安全治理和云原生安全检测。

This GitHub Action runs Checkov against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabi…

Manage admission policies in your Kubernetes cluster with ease

Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️

Kubernetes tool for scanning clusters for network policies and identifying unprotected workloads.