cnapp 开源项目推荐（57 个）

turbot /steampipe

Zero-ETL，无限可能。通过 SQL 实现实时查询 API、代码及更多功能。无需数据库。

deepfence /ThreatMapper

Open Source Cloud Native Application Protection Platform (CNAPP)

someengineering /fixinventory

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

Zeus-Labs /ZeusCloud

Open Source Cloud Security

turbot /powerpipe

Powerpipe: Dashboards for DevOps. Visualize cloud configurations. Assess security posture against a massive library of benchmarks. Build custom dashboards with code.

someengineering /cloud-security-list

A list of cloud security tools and vendors.

transilienceai /shasta

Transilience——Shasta 是开源、GA 前的 AI 与云安全平台。支持 GCP、AWS 和 Azure，以及 14 个安全与合规框架

CloudDefenseAI /falco_extended_rules

Curating Falco rules with MITRE ATT&CK Matrix

PaloAltoNetworks /prisma_channel_resources

A collection of technical and sales resources related to Prisma Cloud Compute and Prisma Cloud Enterprise created for the PANW Channel Partner Ecosystem and other engineers working with the solution

g4r-tech /awesome-cloud-guardrails

Schema-driven awesome list of cloud security guardrails powering cloudguardrail.com/tools

koda-ai-studio /agent-bom

AI supply-chain BOM: every agent, MCP server and AI package, and what each one can reach. Open-source scanner and self-hosted control plane for code, containers, cloud and AI. Self-host free; local scans need no account.

tigera-solutions /prevent-detect-and-mitigate-container-based-threats

[Free Training Workshop] Learn how to prevent, detect and mitigate container based threats using Calico Cloud

chanduusc /prismacloud-demo

Complete CNAPP Demo using Prisma Cloud

PaloAltoNetworks /learn-prisma-cloud-automation

A set of tutorials to learn how to automate various Prisma Cloud tasks.

luiacuaniello /perspectivegraph

Open source attack-path engine for AWS and Kubernetes: correlates your scanners into one graph and blocks the pull request that opens a route to your data.

paulveillard /cybersecurity-cnapp

An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Cloud Native Application Protection Platform (CNAPP) in Cybersecurity

OpenSourceOM /core

Open-source cloud security platform — collectors, graph engine, API

zelyo-ai /zelyo-operator

K8s-native AI security platform that auto-generates fixes as pull requests — detect, correlate, remediate with human-in-the-loop review.

trendmicro /tm-v1-fs-golang-sdk

Trend Vision One File Security Go SDK

SaptarshiSarkar12 /K8sAttackMap

Visualize Kubernetes attack paths and neutralize risks. Maps cluster relationships against CIS Benchmarks & MITRE ATT&CK to identify and fix critical choke points.