µBPF - a framework for microcontroller compartmentalization using eBPF

cgpt - cli for LLM operations

All-in-one AI CLI tool featuring Chat-REPL, Shell Assistant, RAG, AI tools & agents, with access to OpenAI, Claude, Gemini, Ollama, Groq, and more.

Efficient Container Image Updating with Delta Encoding

Wasm component-native RPC framework

Like `execve`, but for userspace

Lima template for NixOS that serves as a remote docker daemon and a nix linux builder

Borgo is a statically typed language that compiles to Go.

The S2C2F Project is a group working within the OpenSSF's Supply Chain Integrity Working Group formed to further develop and continuously improve the S2C2F guide which outlines and defines how to s…

VMM-based macOS Native Container Runtime

XNU kernel, Kernel Collection and CodeQL build scripts

Reduction Server in Rust

Forensic tool to read all installed packages from a mounted Arch Linux drive and compare the filesystem to a trusted source

Go bindings for WebGPU, a safe & cross-platform GPU abstraction

llama.go is like llama.cpp in pure Golang!

[WIP] Demo of a minimal but functional Dawn-based WebGPU client and server

Distributions of WebGPU for native and web development, easy to integrate and interchangeable.

An open-source, cross-platform terminal for seamless workflows

eBPF-based Security Observability and Runtime Enforcement

Ability to create Kata pods using cloud provider APIs aka the peer-pods approach

An experimental AOT compiler that translates Linux ELF binary to WebAssembly

🤖 Get started with LLMs on your kind cluster, today!

🧵 CLI tool for directly patching container images!

Envision a future where every student can read all the code of a teaching operating system.

Reference implementation of OpenPubkey

A library for signing in-toto attestations with OpenPubkey

A docker CLI plugin for verifying signed attestations on images