$ cat /crashappsec/README.md

The engines are open source.

Our core tagging and tracking engines are open source. Inspect the code, fork it, extend it, or contribute back.

Chalk

Know what’s running, and where it came from.

Chalk runs inside your build, tags every artifact with signed, embedded provenance, and tracks it into production — so you always know what shipped and where it came from.

Provenance travels with the artifact — signed, verifiable at every step
Beacons from production — you know what’s deployed in real time
SBOM generated automatically — a byproduct of the build, not a separate step

bash

# Linux (amd64/arm64) · macOS (arm64)
version=$(curl -fsSL https://dl.crashoverride.run/chalk/current-version.txt)
wget https://dl.crashoverride.run/chalk/chalk-$version-$(uname -s)-$(uname -m){,.sha256}
chmod +x chalk-$version-$(uname -s)-$(uname -m)

v1.1.3 ·released Jul 6 ·Nim ·GPL-3.0 ·438 ★

★ Star on GitHub Quickstart Docs

Ocular

Security scanning, orchestrated by Kubernetes.

Open-source orchestration platform for security scanning on Kubernetes.

Kubernetes-native CRDs
Asset scanning orchestration
Configurable scan policies

bash

# Requires a Kubernetes cluster and Helm
helm repo add crashoverride https://crashappsec.github.io/helm-charts
helm install ocular crashoverride/ocular \
  --namespace ocular-system --create-namespace

v0.4.0 ·released Jul 8 ·Go ·GPL-3.0 ·38 ★

★ Star on GitHub Docs

Star us on GitHub

Join the open source community building the future of developer security tooling. Every star helps more developers find us.

Book a demo Explore the docs