DISTRIBUTIONS.md

• act: Run your GitHub Actions locally
• age: A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.
• age-keygen: A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.
• ali: Generate HTTP load and plot the results in real-time
• ansible-operator: SDK for building Kubernetes applications. Provides high level APIs, useful abstractions, and project scaffolding.
• argocd: Declarative continuous deployment for Kubernetes.
• arkade: Declarative continuous deployment for Kubernetes.
• asciigraph: Go package to make lightweight ASCII line graph ╭┈╯ in command line apps with no other dependencies.
• asciinema-edit: asciinema casts post-production tools
• athens: A Go module datastore and proxy
• audit2rbac: Autogenerate RBAC policies based on Kubernetes audit logs
• awless: A Mighty CLI for AWS
• aws-iam-authenticator: A tool to use AWS IAM credentials to authenticate to a Kubernetes cluster
• aws-vault: A vault for securely storing and accessing AWS credentials in development environments
• awstaghelper: AWS bulk tagging tool
• bat: A cat(1) clone with wings.
• batect: Build And Testing Environments as Code Tool
• binenv: One binary to rule them all. Manage all those pesky binaries (kubectl, helm, terraform, ...) easily.
• bomberman: SMTP Performance and Load Test Tool
• bottom: Yet another cross-platform graphical process/system monitor.
• broot: A new way to see and navigate directory trees
• btop: A monitor of resources
• bud: The Full-Stack Web Framework for Go
• buildx: Docker CLI plugin for extended build capabilities with BuildKit
• changie: Automated changelog tool for preparing releases with lots of customization options
• chart-testing: CLI tool for linting and testing Helm charts
• cheat: cheat allows you to create and view interactive cheatsheets on the command-line.
• check-tls-cert: Check-tls-cert is a TLS certificate checker.
• checkip: Check an IP address using various public services
• chezmoi: Dotfile management tool
• chisel: A fast TCP/UDP tunnel over HTTP
• choose: A human-friendly and fast alternative to cut and (sometimes) awk
• cli53: Command line tool for Amazon Route 53
• clog-cli: Generate beautiful changelogs from your Git commit history
• cloudman: Textual user interface to manage ec2 instances.
• cmctl: CLI tool that can help you to manage cert-manager resources inside your cluster.
• comet: Command line tool to help you use conventional commit messages
• config-registry: Switch between kubeconfigs and avoid unintentional operation on your production clusters.
• confused: Tool to check for dependency confusion vulnerabilities in multiple package management systems
• consul: Consul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.
• crabz: Like pigz, but rust
• ctop: Top-like interface for container metrics
• curlie: The power of curl, the ease of use of httpie.
• datree: Prevent Kubernetes misconfigurations from reaching production (again 😤 )! Datree is a CLI tool to ensure K8s manifests and Helm charts follow best practices as well as your organization’s policies.
• ddosify: High-performance load testing tool, written in Golang.
• delta: A more intuitive version of du in rust
• derefexo: A process manager & log viewer for dev
• devdash: Highly Configurable Terminal Dashboard for Developers and Creators
• devspace: DevSpace - The Fastest Developer Tool for Kubernetes  Automate your deployment workflow with DevSpace and develop software directly inside Kubernetes.
• direnv: An extension for your shell. It augments existing shells with a new feature that can load and unload environment variables depending on the current directory.
• dive: A tool for exploring each layer in a docker image
• docker-slim: DockerSlim (docker-slim): Don't change anything in your Docker\ncontainer image and minify it by up to 30x (and for compiled languages even\nmore) making it secure too! (free and open source)
• dockle: Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start
• doctl: The official digital ocean command line interface
• driftctl: Detect, track and alert on infrastructure drift
• driftwood: Private key usage verification
• dstask: Single binary terminal-based todo manager with git-based sync + markdown notes per task
• dstask-import: Single binary terminal-based todo manager with git-based sync + markdown notes per task (import tool)
• duf: Disk Usage/Free Utility
• dust: A more intuitive version of du in rust
• dw-query-digest: MySQL slow log analyzer. Alternative to pt-query-digest.
• egress-auditor: Audit your egress connections and finally populate this OUTPUT chain !
• eksctl: eksctl is a simple CLI tool for creating clusters on AWS EKS.
• exa: A modern replacement for ‘ls’.
• exo: Command-line tool for everything at Exoscale: compute, storage, dns.
• fd: A simple, fast and user-friendly alternative to 'find'
• ffsend: Easily and securely share files from the command line. A fully featured Firefox Send client.
• flux: Declarative continuous deployment for Kubernetes.
• fselect: Find files with SQL-like queries
• fx: Terminal JSON viewer & processor
• fzf: fzf is a general-purpose command-line fuzzy finder.
• gbt: Highly configurable prompt builder for Bash, ZSH and PowerShell written in Go.
• gdu: Pretty fast disk usage analyzer written in Go.
• geesefs: Finally, a good FUSE FS implementation over S3
• gh: GitHub’s official command line tool
• github-release-notes: Generate release notes content from GitHub Pull Request history.
• gitjacker: Leak git repositories from misconfigured websites
• gitlab-terraform-manager: The tool for manage gitlab terraform backend
• gitleaks: Scan git repos (or files) for secrets using regex and entropy
• gitui: Blazing fast terminal client for git written in Rust
• glab: An open-source GitLab command line tool
• glow: Render markdown on the CLI, with pizzazz! 💅🏻
• gocloc: A little fast cloc(Count Lines Of Code)
• gokart: A static analysis tool for securing Go code
• golangci-lint: Fast linters Runner for Go
• goreleaser: Deliver Go binaries as fast and easily as possible
• gorss: Go Terminal Feed Reader
• gosec: Golang security checker
• gotop: Just another terminal based graphical activity monitor
• gotty: Share your terminal as a web application
• gping: Ping, but with a graph
• grafana-kiosk: Kiosk utility for Grafana
• grafana_cli: A CLI based utility to operate Grafana dashboards, folders, annotations, etc.
• grex: A command-line tool and library for generating regular expressions from user-provided test cases
• grizzly: A utility for managing Jsonnet dashboards against the Grafana API
• gron: Make JSON greppable!
• grype: A vulnerability scanner for container images and filesystems
• gws: Colorful KISS helper for git workspaces
• hadolint: Dockerfile linter, validate inline bash, written in Haskell
• havener: Think of it as a swiss army knife for Kubernetes tasks
• hcloud: a tool for controlling hetzner cloud resources
• helm: The Kubernetes Package Manager
• helm-docs: a tool for controlling hetzner cloud resources
• helm-operator: SDK for building Kubernetes applications. Provides high level APIs, useful abstractions, and project scaffolding.
• helmfile: Deploy Kubernetes Helm Charts
• helmwave: 🌊 Composer for @helm Charts
• hetty: Hetty is an HTTP toolkit for security research.
• himalaya: 📫 CLI email client
• httpx: httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads.
• httpx-win: httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads (windows).
• hugo: The world’s fastest framework for building websites.
• hugo-extended: The world’s fastest framework for building websites.
• iamlive: Generate an IAM policy from AWS calls using client-side monitoring (CSM) or embedded proxy
• imgpkg: Allows you to store and distribute sets of files (e.g. application configuration) as images in Docker (OCI) registries
• influxevent: Influxevent wraps commands and sends command result, timing & performance samples to an influxDB server.
• infracost: Cloud cost estimates for Terraform
• jless: A command-line pager for JSON data.
• juicefs: JuiceFS is a distributed POSIX file system built on top of Redis and S3.
• k3d: Lightweight kubernetes distribution that creates containerized k3s clusters. This means, that you can spin up a multi-node k3s cluster on a single machine using docker.
• k6: A modern load testing tool, using Go and JavaScript - https://k6.io
• k8stail: tail -f experience for Kubernetes Pods
• k9s: Kubernetes CLI To Manage Your Clusters In Style!
• kafkactl: Command Line Tool for managing Apache Kafka
• kail: kubernetes log viewer
• kapp: A simple deployment tool focused on the concept of \Kubernetes application\
• kbld: Seamlessly incorporates image building and image pushing into your development and deployment workflows
• kcli: Kcli is a kafka read only command line browser.
• kconnect: A CLI for managing Kubernetes cluster connections
• kdigger: kdigger is a context discovery tool for Kubernetes penetration testing.
• ketall: Like kubectl get all, but get really all resources
• kind: Kubernetes IN Docker - local clusters for testing Kubernetes
• kompose: Go from Docker Compose to Kubernetes
• kopia: Cross-platform backup tool for Windows, macOS & Linux with fast, incremental backups, client-side end-to-end encryption, compression and data deduplication. CLI and GUI included.
• kops: Kubernetes Operations (kops) - Production Grade K8s Installation, Upgrades, and Management
• ksd: Kubernetes secret decoder
• kube-beacon: Open Source runtime scanner for k8s cluster and perform security audit checks based on CIS Kubernetes Benchmark specification
• kube-bench: Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
• kube-dump: Backup a Kubernetes cluster as a yaml manifest
• kube-linter: KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best practices.
• kubeaudit: kubeaudit helps you audit your Kubernetes clusters against common security controls
• kubecolor: colorizes kubectl output
• kubectl: Production-Grade Container Scheduling and Management (cli)
• kubectl-krew: Find and install kubectl plugins
• kubectx: Faster way to switch between clusters in kubectl
• kubeeye: KubeEye aims to find various problems on Kubernetes, such as application misconfiguration, unhealthy cluster components and node problems.
• kubefwd: Forward multiple ports in Kubernetes
• kubens: Faster way to switch between namespaces in kubectl
• kubent: kube-no-trouble - Easily check your clusters for use of deprecated APIs
• kubepug: Kubernetes PreUpGrade (Checker)
• kuberlogic: Kuberlogic is an open-source product that deploys and manages software on top of the Kubernetes cluster and turns infrastructure into a managed PaaS.
• kubescape: kubescape is the first tool for testing if Kubernetes is deployed securely as defined in Kubernetes Hardening Guidance by to NSA and CISA
• kubeseal: A Kubernetes controller and tool for one-way encrypted Secrets
• kubesec: Secure Secret management for Kubernetes (with gpg, Google Cloud KMS and AWS KMS backends)
• kubeshark: The API traffic analyzer for Kubernetes providing real-time K8s protocol-level visibility, capturing and monitoring all traffic and payloads going in, out and across containers, pods, nodes and clusters. Inspired by Wireshark, purposely built for Kubernetes
• kubestr: A tool to discover, validate and evaluate Kubernetes storage options
• kubesurvival: Significantly reduce Kubernetes costs by finding the cheapest machine types that can run your workloads
• kubeswitch: The kubectx for operators
• kubetail: Repository for kubetail - The pod log tailer
• kubeval: Validate your Kubernetes configuration files, supports multiple Kubernetes versions
• kustomize: Customization of kubernetes YAML configurations
• kyverno: Kyverno (Greek for “govern”) is a policy engine designed specifically for Kubernetes.
• lazydocker: The lazier way to manage everything docker
• lazygit: A simple terminal UI for git commands.
• local-php-security-checker: PHP security vulnerabilities checker
• logcli: Like Prometheus, but for logs (cli).
• loki: Like Prometheus, but for logs.
• lsd: The next gen ls command
• lux: Fast, simple and clean video downloader
• mage: a Make/rake-like dev tool using Go
• mcfly: Fly through your shell history. Great Scott!
• micro: A modern and intuitive terminal-based text editor
• migrate: CLI database migrations tool.
• miller: Miller is like awk, sed, cut, join, and sort for name-indexed data such as CSV, TSV
• minikube: Run Kubernetes locally
• mizu: Replaced by kubeshark
• mygopherhose: Faster import for mysqldumps
• mysql_random_data_load: MySQL random data loader
• naabu: A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests
• node-problem-detector: This is a place for various problem detectors running on the Kubernetes nodes.
• nomad: Nomad is an easy-to-use, flexible, and performant workload orchestrator that can deploy a mix of microservice, batch, containerized, and non-containerized applications. Nomad is easy to operate and scale and has native Consul and Vault integrations.
• noti: Monitor a process and trigger a notification
• nuclei: Fast and customizable vulnerability scanner based on simple YAML based DSL.
• onefetch: Git repository summary on your terminal
• operator-sdk: SDK for building Kubernetes applications. Provides high level APIs, useful abstractions, and project scaffolding.
• oto: Go driven rpc code generation tool for right now (cli).
• packer: Packer is a tool for creating identical machine images for multiple platforms from a single source configuration.
• pandoc-plot: Render and include figures in Pandoc documents using your plotting toolkit of choice
• parca: Continuous profiling for analysis of CPU, memory usage over time, and down to the line number. Saving infrastructure cost, improving performance, and increasing reliability.
• pass-checker: Get the entropy of your password, the maximum time needed to break it, and if the SHA1 sum appears in HaveIBeenPwned.com API.
• peco: Simplistic interactive filtering tool
• peirates: Peirates - Kubernetes Penetration Testing tool
• pet: Simple command-line snippet manager, written in Go.
• pgmetrics: Collect and display information and stats from a running PostgreSQL server
• phpsecscan: PHP vulnerability scanner (standalone or as a webserver) using FoP advisories
• pint: Prometheus rule linter
• plow: A high-performance HTTP benchmarking tool with real-time web UI and terminal displaying
• pluto: A cli tool to help discover deprecated apiVersions in Kubernetes
• pnpm: Fast, disk space efficient package manager for nodejs
• pomerium: Pomerium is an identity-aware access proxy.
• pomerium-cli: Pomerium is an identity-aware access proxy (cli).
• popeye: A Kubernetes cluster resource sanitizer
• procs: A modern replacement for ps written in Rust.
• promtail: Like Prometheus, but for logs (promtail).
• pscale: The CLI for PlanetScale Database
• pulumi: Modern Infrastructure as Code. Any cloud, any language
• pwru: Packet, where are you? -- Linux kernel networking debugger
• rancher: Rancher is an open source software platform that enables organizations to run and manage Docker and Kubernetes in production. (cli)
• regctl: Client interface for the registry API. This includes regctl for a command line interface to manage registries.
• rg: ripgrep is a line-oriented search tool that recursively searches your current directory for a regex pattern
• rga: ripgrep, but also search in PDFs, E-Books, Office documents, zip, tar.gz
• ruflood: Helping Ukraine by flooding russian state-controlled media/bureau/bank websites.
• saml2aws: CLI tool which enables you to login and retrieve AWS temporary credentials using a SAML IDP
• scan-exporter: Scans targets and exposes results to Prometheus.
• sd: Intuitive find & replace CLI (sed alternative)
• shaloc: LAN-scoped command line sharing tool with cool features (zip archives, AES-256, download limits...).
• shdotenv: dotenv support for shell and POSIX-compliant .env syntax specification.
• shell2http: Executing shell commands via HTTP server
• skaffold: Skaffold handles the workflow for building, pushing and deploying your application, allowing you to focus on what matters most writing code.
• slides: Terminal based presentation tool
• sloop: Kubernetes History Visualization
• slowql-digest: A package to parse slow query logs in Go, with associated tooling (digester, replayer...), and compatible with multiple databases (MySQL, MariaDB, PerconaDB...).
• slowql-replayer: A package to parse slow query logs in Go, with associated tooling (digester, replayer...), and compatible with multiple databases (MySQL, MariaDB, PerconaDB...).
• snowcat: a tool to audit the istio service mesh
• sonobuoy: Sonobuoy is a diagnostic tool that makes it easier to understand the state of a Kubernetes cluster by running a set of Kubernetes conformance tests and other plugins in an accessible and non-destructive manner.
• sops: Simple and flexible tool for managing secrets
• spt: A Spotify client for the terminal written in Rust.
• sshproxy: Proxy SSH connections on a gateway
• ssllabs-scan: A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing.
• ssosync: Populate AWS SSO directly with your G Suite users and groups using either a CLI or AWS Lambda
• starship: The minimal, blazing-fast, and infinitely customizable prompt for any shell!
• steampipe: Use SQL to instantly query your cloud services (AWS, Azure, GCP and more). Open source CLI. No DB required.
• stern: ⎈ Multi pod and container log tailing for Kubernetes -- Friendly fork of https://github.com/wercker/stern
• stoppropaganda: DOS application to stop pro-Russian aggression websites. Support Ukraine!
• subfinder: Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
• subfinder-win: Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing (windows).
• swag: Automatically generate RESTful API documentation with Swagger 2.0 for Go.
• swagger: Swagger 2.0 implementation for go
• sx: Fast, modern, easy-to-use network scanner
• sysz: An fzf terminal UI for systemctl
• tanka: Flexible, reusable and concise configuration for Kubernetes
• task: A task runner / simpler Make alternative written in Go
• taskctl: simple modern alternative to GNU Make.
• telegraf-tailcount: Counts new lines in growing file and return InfluxDB metrics on STDOUT.
• telepresence: Fast, local development for Kubernetes and OpenShift microservices.
• teler: Real-time HTTP Intrusion Detection
• termshark: A terminal UI for tshark, inspired by Wireshark
• terraform: Terraform enables you to safely and predictably create, change, and improve infrastructure. It is an open source tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed
• terraform-docs: Generate documentation from Terraform modules in various output formats
• terraform-inventory: terraform-inventory creates an ansible inventory from terraform
• terragrunt: Terragrunt is a thin wrapper for Terraform that provides extra tools for working with multiple Terraform modules.
• terrascan: Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.
• tf2pulumi: A tool to convert Terraform projects to Pulumi TypeScript programs
• tflint: TFLint is a Terraform linter focused on possible errors, best practices, etc. (Terraform >= 0.12)
• tfsec: TFsec uses static analysis of your terraform templates to spot potential security issues.
• tlder: TLDs finder — check domain name availability across all valid top-level domains.
• tlsexp: TLS certificate expiration checker.
• tofu: OpenTofu lets you declaratively manage your cloud infrastructure.
• toji: Toji is a Toggle ➡ Jira bridge: sync your Toggl entries directly into Jira issues worklog
• traefik: The Cloud Native Application Proxy
• trivy: A Simple and Comprehensive Vulnerability Scanner for Containers, Suitable for CI
• trufflehog: Find credentials all over the place https://trufflesecurity.com
• underpass: Self-hosted ngrok alternative
• updatecli: Updatecli is an automation engine
• upx: UPX - the Ultimate Packer for eXecutables
• vagrant: A toolfor building and distributing development environments.
• vault: A tool for secrets management, encryption as a service, and privileged access management
• velero: A tool for backup a kubernetes cluster.
• vmctl: Victoria Metrics command line tool
• websocat: About Command-line client for WebSockets, like netcat (or curl) for ws:// with advanced socat-like functions
• wtf: The personal information dashboard for your terminal
• wuzz: Interactive cli tool for HTTP inspection
• xh: Friendly and fast tool for sending HTTP requests
• yamlfmt: An extensible command line tool or library to format yaml files
• yeshttp: A HTTP server that always says yes
• yh: YAML syntax highlighter to bring colours to kubectl output
• yj: Convert between YAML, TOML, JSON, and HCL.
• yor: Extensible auto-tagger for your IaC files. The ultimate way to link entities in the cloud back to the codified resource which created it.
• yq: a lightweight and portable command-line YAML processor
• ytt: YAML templating tool that works on YAML structure instead of text