Awesome GitHub RepositoriesOCI Layer Extraction

This project is a pretrained model library for PyTorch, providing a collection of convolutional neural network architectures and weights. It serves as a computer vision model zoo for image classification and feature extraction, offering a framework for transfer learning where pretrained networks are adapted for custom image recognition tasks. The library focuses on transforming images into high-level numerical representations and calculating class probability scores. It includes utilities for downloading and initializing standard architectures such as ResNet, Inception, and Xception. Capabil

Flux is a Kubernetes GitOps delivery tool used to automate application deployments by synchronizing cluster state with configurations stored in Git, OCI, or Helm repositories. It functions as a set of controllers that monitor desired state in external sources and continuously reconcile the live cluster to match those definitions. The system distinguishes itself through a multi-cluster management plane that coordinates application delivery across fleets of remote clusters from a central hub. It provides a dedicated mechanism for automated image updates, which scans container registries for new

This project is a collection of deep learning tools for image classification and audio tagging, providing a repository of pre-trained model weights and architectures. It serves as a Keras model zoo that enables the immediate use of established neural networks for inference and transfer learning. The library includes a music tagging framework that classifies audio recordings using convolutional recurrent neural networks and mel-spectrograms. For visual data, it provides implementations of architectures such as ResNet, VGG, and Xception, alongside a repository of weights trained on large datase

Cosign is a tool for signing and verifying software artifacts, primarily those stored in OCI-compatible registries such as container images, Helm charts, SBOMs, and Tekton bundles. It supports keyless signing using ephemeral keys and short-lived certificates from the Sigstore public-good infrastructure, associating signatures with an OpenID Connect identity rather than a long-lived cryptographic key. The project provides multiple signing and verification methods, including private keys, key pairs stored in KMS providers like AWS KMS and Azure Key Vault, and hardware security keys. It can sign

Arkade ist eine Suite von Tools zur Verwaltung von Entwickler-Binärdateien, Kubernetes-Anwendungsbereitstellungen und der Wartung von Helm-Charts. Es fungiert als CLI-Tool-Manager und Marktplatz für Entwickler-Tools, mit dem eigenständige Binärdateien und Systempakete über verschiedene Betriebssysteme und Architekturen hinweg entdeckt, heruntergeladen, aktualisiert und deinstalliert werden können. Das Projekt zeichnet sich durch die Fähigkeit aus, ausführbare Binärdateien direkt aus OCI-Container-Images für die lokale Installation zu extrahieren, ohne eine Container-Runtime zu benötigen. Es bietet zudem spezialisierte Dienstprogramme für die Wartung von Helm-Charts, einschließlich der Möglichkeit, Container-Images auf Registry-Zugänglichkeit zu scannen, Image-Versionen zu aktualisieren und Patch-Versionen zu erhöhen. Das Toolset deckt die Installation und Deinstallation von Kubernetes-Anwendungen mittels Charts und statischen Manifesten ab sowie die Bereitstellung von Linux-Workstations und CI-Runnern durch Systempaketinstallation und systemd-Integration. Es enthält Funktionen zum Durchsuchen von Softwarekatalogen und zum Abrufen von Konfigurationsdetails nach der Bereitstellung für Cluster-Anwendungen.

Clutch is a command-line utility designed for security research on jailbroken mobile devices. It functions as a specialized toolkit for identifying, decrypting, and extracting installed mobile application binaries to facilitate manual code inspection and vulnerability assessment. The tool provides capabilities for removing platform-level encryption from protected software, allowing researchers to isolate core executable files from application bundles. By performing memory-mapped file dumping and reconstructing binary headers, it enables the conversion of protected applications into portable,