fix-cf
fixinventory
| fix-cf | fixinventory | |
|---|---|---|
| 2 | 38 | |
| 2 | 1,540 | |
| - | 0.7% | |
| 7.2 | 9.6 | |
| about 1 month ago | 2 days ago | |
| Shell | Python | |
| GNU Affero General Public License v3.0 | GNU Affero General Public License v3.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
fix-cf
-
Show HN: Fix – An open source cloud asset inventory for cloud security engineers
Neat! Done. Thank you!
I also removed the old lambda based callback template from the repo. We're now using an SNS topic as part of a CustomFunction, to know when a user has deployed the stack (https://github.com/someengineering/fix-cf/blob/main/fix-role...). More work on our side, but less sketchy than executing code just to receive a callback that tells us the role name and account id.
fixinventory
-
Show HN: Fix – An open source cloud asset inventory for cloud security engineers
The reasoning is explained in the very section of our Github org README you quoted this sentence from. Our main open source project is Fix Inventory (https://github.com/someengineering/fixinventory) and that is very well documented (https://inventory.fix.security) and uses no commercial 3rd party libraries.
The Fix SaaS frontend that you're referring to and that you find at https://fix.security builds upon Fix Inventory. We could have just made it closed-source like every other SaaS (think Grafana Cloud). But because I'm a big proponent of OSS we decided to open source our entire SaaS stack, frontend, backend as well as all internal tooling. The main intend here is transparency, not so you spin up your own SaaS environment.
Essentially we develop the SaaS for ourselves first and foremost, but saw no reason to make it closed source. So that is why it might be using any number of commercial 3rd party add-ons.
> I'm curious to know what Material UI provided that any other open-source UI library did not.
I believe it was some MUI X table features like multi row sorting that we didn't feel like re-implementing. I'm sure there's other open source libs that would do that, but we've settled on MUI and are not going to start mixing different UI libraries for different visual elements if we don't absolutely have to.
-
Unreal Engine change its price for non-game apps
It is a good time for send the showreel of serious apps in Godot:
https://www.youtube.com/watch?v=9kKp0oguzr8
I know a free software monitoring tool made with Godot:
https://www.youtube.com/watch?v=AVAU2JjvHug
https://github.com/someengineering/resoto
-
Cloudquery, Resoto, Steampipe, or Airbyte?
Resoto: https://resoto.com/
- Invoice granularity: Show different accounts/cost allocation tags on invoice
- Resoto | Graph-based Cloud Asset Inventory
- How much does Discovery really cost?
- Forming an MSP - some questions
-
someengineering/cloud2sql - Read infrastructure data from your cloud and export it to a SQL database.
It is a sub-project of our cloud resource management tool Resoto but runs standalone and stateless. It's meant for easy integration into your own data pipelines.
-
SRE tools?
--> https://github.com/someengineering/resoto
- Graph Databases
What are some alternatives?
cloud-custodian - Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
query-exporter - Export Prometheus metrics from SQL queries
sysbindings - sysctl/sysfs settings on a fly for Kubernetes Cluster. No restarts are required for clusters and nodes.
prometheus_flask_exporter - Prometheus exporter for Flask applications
steampipe - Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
cloud-nuke - A tool for cleaning up your cloud accounts by nuking (deleting) all resources within it
CloudGraph cli - The universal GraphQL API and CSPM tool for AWS, Azure, GCP, K8s, and tencent.
slo-exporter - Slo-exporter computes standardized SLI and SLO metrics based on events coming from various data sources.
awesome-sre - A curated list of Site Reliability and Production Engineering resources.
PurplePanda - Identify privilege escalation paths within and across different clouds
cloud2sql - Read infrastructure data from your cloud ☁️ and export it to a SQL database 📋.
cloudquery - The open source high performance ELT framework powered by Apache Arrow