The OWASP Top Ten is probably familiar to lots of readers, but the incubating OWASP Kubernetes Top Ten might not be. The top security risks to address when running Kubernetes.

https://owasp.org/www-project-kubernetes-top-ten/

HyperX is an open source observability platform, centralising and correlating logs, metrics, traces, exceptions and session replays in one place.

https://github.com/hyperdxio/hyperdx
https://www.hyperdx.io

OpenTofu is the much discussed open source fork of Terraform, created in response to the Terraform licence changes. The last week has seen the first alpha releases become available.

https://opentofu.org/
https://github.com/opentofu/opentofu

Terramate is a tool for writing and maintaining infrastructure as code, making use of code generation and higher-level orchestration. Focused on Terraform today but intended to be generic.

https://github.com/terramate-io/terramate

SigNoz is an open source observability platform, providing APM, logs, metrics, exceptions, alerts, and dashboards powered by a powerful query builder.

https://signoz.io/
https://github.com/signoz/signoz

esc is a new tool for managing environments, secrets and configuration. It includes a CLI tool to provide just-in-time authenticated and short-lived access to cloud credentials amongst other features.

https://www.pulumi.com/blog/environments-secrets-configurations-management/
https://github.com/pulumi/esc

Autometrics looks like an interesting framework, aimed at making it easier to instrument an application. It generates Prometheus metrics and queries automatically, and automatically generates documentation linking to generated dashboards.

https://github.com/autometrics-de

Secretive is a macOS app for storing and managing SSH keys in the hardware Secure Enclave.

https://github.com/maxgoedjen/secretive

A terraform module for creating and managing scalable self hosted GitHub action runners.

https://github.com/philips-labs/terraform-aws-github-runner