BKN Foundry is the Ontology back-end foundation of OpenBKN. It transforms ontology-driven business semantics into runtime services: data, logic, actions, security governance, and observability.
The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.
Git with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD
High performance, self-hosted, newsletter and mailing list manager with a modern dashboard. Single binary app.
Open-source AI agent firewall for MCP security and agent egress. Scans mediated HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injection, and emits mediator-signed action receipts: verifiable audit evidence from outside the agent.
TiDB is built for agentic workloads that grow unpredictably, with ACID guarantees and native support for transactions, analytics, and vector search. No data silos. No noisy neighbors. No infrastructure ceiling.
Release engineering, simplified
Kubernetes controller for GitHub Actions self-hosted runners
:octocat: Static checker for GitHub Actions workflow files
Self-hosted SERP API for AI, SEO & automation. Browser-rendered Google, Bing, Yandex, Baidu, DuckDuckGo and Ecosia search with page extraction 🎉
OpenAPI Diff and Breaking Changes
Build and develop iOS apps without a Mac using GitHub Actions, Codemagic, or Bitrise, with simulator access and hot reload via MobAI.
Self-hosted email delivery platform that enables applications to send emails via HTTP APIs while handling SMTP delivery, templates, storage, security, and analytics. Fully self-hostable alternative to services like SendGrid or Mailgun.
Visibility into AI agent activity on endpoints, with on-device detection, optional pre-action blocking, and forensic reconstruction.
Blnk is an open-source ledger & financial core for shipping fintech products fast.
Zoomies is a lightweight, self-hosted GitHub Actions runner fleet controller. Ephemeral runners by default, GitHub App auth, webhook-driven autoscaling, multi-host agents, a polished live web UI, and a one-line interactive installer. Single Go binary, SQLite, no Kubernetes.
An OOB interaction gathering server and client library
trzsz-ssh ( tssh ) is an ssh client designed as a drop-in replacement for the openssh client. It aims to provide complete compatibility with openssh, mirroring all its features, while also offering additional useful features. Such as login prompt, batch login, remember password, automated interaction, trzsz, zmodem(rz/sz), udp mode like mosh, etc.
Fork of the Go standard TLS library, providing low-level access to the ClientHello for mimicry purposes.
A tool to convert a Wallpaper's color scheme / palette, OCR with VLM's Traditional & Hybrid, Image Compression ,color palette extraction, image upsacling with Adversarial Networks and more image processing features.
poutine, a supply chain vulnerability scanner for build pipelines
Declarative data automation language and Go runtime for structured extraction workflows.
Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.
Fluid, elastic data abstraction and acceleration for BigData/AI applications in cloud. (Project under CNCF)
Pure-Go native-library emulation framework: load Android AArch64 .so files and call their functions directly — no JVM, no device, zero cgo (libunicorn runtime-loaded via purego). Real bionic, JNI-spec reference lifecycle, engine pool for concurrent use, shared read-only pages, transactional hooks.
An innovative Blockchain Protocol Platform, which everyone can deploy their own applications quickly and easily, such as Dapp, DeFi, DAO, Cross-Blockchain transactions, etc.
Golang PDF library for creating and processing PDF files (pure go)
:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
Open-source, self-hosted newsletter, email marketing and transactional email platform. Visual MJML editor, Liquid templating, 7 sending providers.
The Terraform MCP Server provides seamless integration with Terraform ecosystem, enabling advanced automation and interaction capabilities for Infrastructure as Code (IaC) development.
pinact is a CLI to edit GitHub Workflow and Composite action files and pin versions of Actions and Reusable Workflows. pinact can also update their versions and verify version annotations.
Digger is an open source IaC orchestration tool. Digger allows you to run IaC in your existing CI pipeline ⚡️
Open-source Infrastructure as Code (IaC) orchestration platform: GitOps workflows, orchestration, code generation, observability, drift detection, asset management, policies, Slack notifications, and more. Integrates with Terraform, OpenTofu, Terragrunt, Kubernetes, GitHub Actions, GitLab CI/CD, BitBucket Pipelines, and any other CI/CD platform.
A simple, fast, embeddable, persistent key/value store written in pure Go. It supports fully serializable transactions and many data structures such as list, set, sorted set.
🦄 Monads and popular FP abstractions, powered by Go 1.18+ Generics (Option, Result, Either...)
Context Gateway is an agentic proxy that enhances any AI agent workflow with instant history compaction and context optimization tools
Hyperledger FireFly is the first open source Supernode: a complete stack for enterprises to build and scale secure Web3 applications. The FireFly API for digital assets, data flows, and blockchain transactions makes it radically faster to build production-ready apps on popular chains and protocols.
Local-first, open-source security gateway for AI coding agents. Enforce tool-call policies, detect secrets, and audit actions on-device.
An agentic environment abstraction for Agent Substrate
Final macOS ipatool HTTP 403/SAP transition build; official fix is in majd/ipatool v2.4.0+.
Token-efficient browser automation for coding agents: compressed accessibility snapshots, uid actions, byte-exact recovery. A Playwright MCP alternative.
SDK for building Kubernetes applications. Provides high level APIs, useful abstractions, and project scaffolding.
The Universal Filesystem Abstraction for Go
Modular AI HAL (Hardware Abstraction Layer) for Robots
Functional programming library for Go 1.24+, inspired by fp-ts. Uses generic type aliases for a clean, composable API. Provides Option, Either, Result, IO, IOResult, Reader, and ReaderIOResult monads, plus optics (Lens, Prism, Traversal) for immutable data manipulation. Supports Functor, Applicative, and Monad abstractions with do-notation-style
Configurable Go value and struct dumps with colorized output, type visibility controls, and field redaction.
一个支持多种不同类型数据库,覆盖事前控制、事后监督、标准发布场景,帮助您建立质量规范的SQL全生命周期质量管理平台
Remove all the resources from an AWS account
Record and replay your HTTP interactions for fast, deterministic and accurate tests
A production-grade microservice boilerplate featuring GORM, Goose, Swag, Zerolog, Validator.v10, GitOps, Kubernetes, Kustomize, ArgoCD & Istio.
GitHub Actions as CI for Go
Programming and interaction language. Flexible about syntax, strict about state.
pgx mock driver for golang to test database interactions
The action firewall for AI agents. Enforce policy and human approval before risky tool calls, shell commands, workflows, and production changes, with auditable evidence.
A blazing fast tool for building data pipelines: read, process and output events. Our community: https://t.me/file_d_community
Govern consequential AI agent actions in Docker with deterministic policy, human approval, and signed Decision Dossiers.
Local-first, explainable log incident diagnosis for developers and CI/CD.
Run GitHub Actions workflows as native Buildkite builds
Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow.
Static Ansible linting in Go: the 38 ansible-lint rules decidable from YAML alone, byte-for-byte pep8 output, no Ansible runtime.