Simple macOS GateKeeper script.

Rego policies collection

Notifies the user when macOS Security components like Gatekeeper and XProtect have been updated

Policy Module: Policy enforcement for your Kubernetes Cluster

Toolkit for managing your macOS

A tool to Disable / Enable Gatekeeper from macOS 10.15 to macOS 15

A template repository for building external data providers for Gatekeeper.

Demo scripts for 'Enforcing Automatic mTLS with Linkerd and OPA Gatekeeper'

Extend macOS Gatekeeper functionality by verifying applications at every launch

App Trust Preview is a Mac app that helps you inspect apps, installers, disk images, executables, and scripts before opening them. It turns local macOS security signals into readable reports about signing, notarization, permissions, sandboxing, bundled code, package contents, and other trust indicators.

An example approach to securing containerized workloads within AKS using Notation.

[Archived] Blog post about OPA, Conftest, Gatekeeper and Konstraint

一个支持拖放、无需保存密码的 macOS App 下载隔离属性修复工具。

Policy as Code for Kubernetes — tested Kyverno guardrails (non-root, resource limits, read-only rootfs, no SA token, no :latest, no default namespace) enforced at admission and unit-tested with kyverno test

Free macOS security audit and malware-triage CLI for catching fake, cracked, and tampered apps with code-signature checks

Sign any macOS .app locally with a free Apple ID — no $99 Developer ID, no Gatekeeper nagging, Safari extensions stay enabled

KCSA (Kubernetes Cloud Native Security Associate) hands-on labs covering Kubernetes security, container security, admission control, and cloud native security practices.

Comprehensive macOS security audit tool — 55+ checks, HTML report with security score, one-click fixes. No dependencies. Intel & Apple Silicon.

Kubernetes security-aware scheduling of workloads

「Kubernetes、全部さわる」シリーズ (Zenn) のサンプルリポジトリ