ReadyStackDev

Mimir: scalable long-term storage for Prometheus metrics. Signed; SBOM and SLSA v1 provenance.

PostHog: product analytics from captured user events. Signed; SBOM and SLSA v1 provenance.

NodeBB: real-time forum software with a REST API. Signed; SBOM and SLSA v1 provenance.

cloudflared: client for Cloudflare Tunnel, outbound-only. Signed; SBOM and SLSA v1 provenance.

NetBox: source of truth for network infrastructure and IPs. Signed; SBOM and SLSA v1 provenance.

Portainer: web interface to manage containers and Kubernetes. Signed; SBOM and SLSA v1 provenance.

ZITADEL: identity and access management with SSO and passkeys. Signed; SBOM and SLSA v1 provenance.

Zabbix: distributed monitoring with alerts, graphs and maps. Signed; SBOM and SLSA v1 provenance.

WordPress: publishing software for websites and blogs. Signed; SBOM and SLSA v1 provenance.

Woodpecker: CI/CD engine run from a workflow file in each repo. Signed; SBOM and SLSA v1 provenance.

WireGuard: simple, modern VPN (wireguard-go, userspace). Signed; SBOM and SLSA v1 provenance.

Wiki.js: wiki with Markdown and visual editors, page history. Signed; SBOM and SLSA v1 provenance.

virt-operator: installs and upgrades KubeVirt's components. Signed; SBOM and SLSA v1 provenance.

virt-launcher: runs each KubeVirt VM; part of the Kubernetes VM Stack. Unlisted: scores below A.

ERPNext: ERP for invoices, stock, sales, production, projects. Signed; SBOM and SLSA v1 provenance.

virt-handler: KubeVirt node agent, part of the Kubernetes VM Stack. Unlisted: scores below A.

virt-exportproxy: KubeVirt's proxy for virtual machine exports. Signed; SBOM and SLSA v1 provenance.

virtctl: KubeVirt's command-line client for virtual machines. Signed; SBOM and SLSA v1 provenance.

virt-controller: KubeVirt's cluster-wide VM controller. Signed; SBOM and SLSA v1 provenance.

virt-api: KubeVirt's API server for virtual machines. Signed; SBOM and SLSA v1 provenance.

VictoriaMetrics: time series database and monitoring. Signed; SBOM and SLSA v1 provenance.

Vaultwarden: lightweight self-hosted password manager server. Signed; SBOM and SLSA v1 provenance.

Valkey: open-source key-value datastore. Signed; SBOM and SLSA v1 provenance.

Uptime Kuma: self-hosted uptime monitoring and status pages. Signed; SBOM and SLSA v1 provenance.

Traefik: reverse proxy that configures routes automatically. Signed; SBOM and SLSA v1 provenance.

Temporal: durable execution server for workflows. Signed; SBOM and SLSA v1 provenance.

Tempo: distributed tracing backend on object storage. Signed; SBOM and SLSA v1 provenance.

Syncthing: continuous file sync between your own devices. Signed; SBOM and SLSA v1 provenance.

Paperless-ngx: scanned documents as a searchable OCR archive. Signed; SBOM and SLSA v1 provenance.

Apache Superset: data exploration and visualisation platform. Signed; SBOM and SLSA v1 provenance.