awesome-repositories.com
博客
MCP
awesome-repositories.com

通过 AI 驱动的搜索,发现最优秀的开源仓库。

探索精选搜索开源替代品自托管软件博客网站地图
项目MCP 服务器关于排名机制媒体报道
法律隐私政策服务条款
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
·

2 个仓库

Awesome GitHub RepositoriesSystem Call Profilers

Tools that synthesize restrictive system call policies based on observed application runtime behavior.

Distinct from Security Profiles: Focuses on automated generation of security profiles from runtime behavior, distinct from static security configuration.

Explore 2 awesome GitHub repositories matching devops & infrastructure · System Call Profilers. Refine with filters or upvote what's useful.

Awesome System Call Profilers GitHub Repositories

用 AI 发现最棒的仓库。我们将通过 AI 为您搜索最匹配的仓库。
  • docker-slim/docker-slimdocker-slim 的头像

    docker-slim/docker-slim

    23,311在 GitHub 上查看↗

    This project is a suite of specialized tools for linting, minifying, analyzing, and managing container images and their associated registries. It provides a set of utilities including an image minifier to reduce image size, a security profiler to harden running containers, an image analyzer for static inspection, and a registry manager for organizing multi-architecture indices. The toolset distinguishes itself through behavior-based optimization and security. It uses dynamic analysis to track executed instructions and file access to remove unused binary data, and records kernel interactions t

    Synthesizes restrictive system call policies by recording kernel interactions during application execution.

    Go
    在 GitHub 上查看↗23,311
  • slimtoolkit/slimslimtoolkit 的头像

    slimtoolkit/slim

    22,977在 GitHub 上查看↗

    Slim is a comprehensive suite for container lifecycle management, providing tools for image inspection, optimization, security hardening, and service troubleshooting. It functions as a platform for analyzing containerized applications through both static metadata review and dynamic behavioral probing, enabling users to understand image composition and runtime dependencies. The project distinguishes itself by automating the creation of minimal, production-ready container images. It achieves this by removing unnecessary files and components, flattening image layers, and synthesizing restrictive

    Generates restrictive system call policies by monitoring application behavior to limit potential attack surfaces.

    Goapparmorcontainersdocker
    在 GitHub 上查看↗22,977
  1. Home
  2. DevOps & Infrastructure
  3. System Configuration Profiles
  4. Security Profiles
  5. System Call Profilers