Tools
cerbos
cerbos/cerbos
An open-source authorization platform for defining fine-grained RBAC and ABAC policies in YAML and evaluating them through a self-hosted policy decision point.
Topics
Related projects
openfga6.1kA high-performance fine-grained authorization engine inspired by Google Zanzibar. It offers HTTP and gRPC APIs, SDKs, and a playground so developers can model and enforce relationship-based access control in their applications.
gitleaks31kA fast CLI scanner that finds passwords, API keys, and tokens leaked in git repos, files, and CI pipelines.
slim23.5kA container optimization toolkit that inspects application behavior to minify images by up to 30x and generate tighter security profiles.
grype13.3kGrype is a vulnerability scanner for container images, filesystems and SBOMs. It covers major OS and language package ecosystems, supports Docker, OCI and Singularity formats, and prioritizes risk with EPSS, KEV and OpenVEX filtering.
vuls12.3kAn agent-less vulnerability scanner for Linux, FreeBSD, containers and more, automatically detecting and reporting security vulnerabilities.
permify6kAn open-source authorization service inspired by Google Zanzibar that lets teams centralize fine-grained RBAC, ReBAC, and ABAC policies. It answers access checks over REST and gRPC in milliseconds and can be self-hosted.