Open Source Software Library

This project was designed to integrate with Statistic Canada’s The Zone platform. In The Zone, users can create individual workspaces with Kubeflow Notebooks. To persist their work, users can attach volumes to their notebooks. These volumes are not automatically deleted when a notebook is deleted. Users are free to move them or to reuse them. As a result, over time, users tend to amass several unused volumes. These volumes sit on the cloud and result in unnecessary costs. The purpose of this project is to design an automatic system that detects these unused volumes and safely removes them, reducing unnecessary expenditure. Despite being primarily designed for Statistics Canada, this project strongly values open-source practices. The codebase is available for public use and the entire development process is documented on the issues page. The volume cleaner was designed to have as little coupling as possible so it can easily integrate into projects outside Statistics Canada. Using open-source and being open-source was an important development philosophy.

dwave-system is an API for easily incorporating D-Wave quantum computers as a sampler in the Ocean software stack, directly or through the Leap service’s cloud-based hybrid solvers. It includes DWaveSampler, a dimod sampler that accepts and passes system parameters such as system identification and authentication down the stack, StrideHybridSolver, for Leap’s Stride™ hybrid solver, and others. It also includes several useful composites—layers of pre- and post-processing—that can be used with DWaveSampler to handle minor-embedding, optimize chain strength, etc.

Client library for accessing D-Wave cloud solvers.

Eclipse Theia is an extensible framework to develop full-fledged multi-language Cloud & Desktop IDEs and tools with state-of-the-art web technologies.

NR Broker is a customizable software deployment business intelligence tool. It automates access to secrets stored in HashiCorp Vault by software (applications, GitHub Actions, etc.), audits activities (builds, installations, provisioning secrets, etc.) and enables access automation. Users can search, browse objects, view a graph representation and review activities using a web application. Developers integrate NR Broker into workflows by sending their intentions, requesting access and recording activity using http requests. As such, NR broker works on private on-premise clouds, AWS, OpenShift Clouds and more.

Let KeePassXC safely store your passwords and auto-fill them into your favorite apps, so you can forget all about them. We do the heavy lifting in a no-nonsense, ad-free, tracker-free, and cloud-free manner. Free and open source. KeePassXC has been awarded a Security Visa by the French National Cybersecurity Agency (ANSSI).

An Indy Tails Server is file server that is designed to receive, store and serve Hyperledger Indy Tails files. Indy tails files are generated by an issuer of Indy AnonCred verifiable credentials when a Revocation Registry is created and must be published to a location accessible by all holders that receive a credential referenced in that Revocation Registry. The generated file is static, it does not change, and the credential holders use the tails file to produce a zero-knowledge proof of non-revocation about their credential and include it when responding to a proof request with a proof that includes claims from a revocable credential. If you are new to Indy AnonCreds Revocation, please review this document to understand how Indy revocation works, and where tails files fit in. An Indy Tails Server is a customized file server that makes it easy for AnonCred Issuers to publish tails files and for holders to access those tails files. A tails file does not have to be published to an Indy Tails Server, they can be published anywhere as long as there exists a URL accessible to all holders to access the tails file. If holders are mobile iOS or Android apps, the URL must use SSL (e.g. must be https:) due to the restrictions in those OS's. Support for publishing tails files to an Indy Tails Server is built into Aries Cloud Agent Python.

This repository is a template for creating an Aries Verifiable Credential Registry (VCR) Issuer Agent. Aries VCR is the foundational technology upon which the Government of British Columbia's OrgBookBC was built. Aries VCR Issuer Controller is a starter kit for building an Aries agent that issues verifiable credentials to instances of an Aries VCR, such as OrgBookBC. This repo contains code for an issuer controller that works with Aries Cloud Agent Python (ACAPy) framework. The controller and an instance of ACA-Py can be deployed together to implement an Aries issuer agent. aries-vcr-issuer-controller was developed as part of the Verifiable Organizations Network (VON). For more information on VON, visit https://vonx.io. Even better, join in with what we are doing and contribute to VON and the Trust over IP community. Still not sure what this is? Please see this Getting started with VON overview, paying particular attention to the VON Issuer/Verifier Agent section. That's what this repo implements.

Tools and policy checks that help Government of Canada teams evaluate IBM Cloud deployments against common cloud guardrails. It is useful for repeatable compliance reviews, documentation of security expectations, and sharing implementation patterns across departments.

Open Policy Agent guidance and configuration examples for checking Google Cloud Platform services against Government of Canada cloud guardrails. The repository documents recommended settings and gives teams a reusable starting point for compliant GCP deployments.

PowerShell-based tooling for assessing Microsoft Azure environments against Government of Canada cloud guardrail requirements. Although archived, it remains a useful reference for Azure compliance automation and policy-as-code patterns.

Terraform and infrastructure templates for accelerating Government of Canada service delivery on Google Cloud Platform. The project packages reusable baseline patterns so teams can start cloud projects with consistent security and operational defaults.

Infrastructure and policy examples for checking Oracle Cloud deployments against Government of Canada guardrails. It provides reusable guidance for teams that need to document cloud compliance controls in Oracle environments.

A Government of Canada guidance repository that supports technical architecture decisions around cloud adoption. It is best used as reference material for teams aligning infrastructure work with public-sector cloud practices.

Reusable PowerShell and infrastructure assets that help Government of Canada teams bootstrap Azure-based services. The repository collects patterns intended to speed up delivery while keeping deployments aligned with shared standards.

Reusable infrastructure templates and examples for accelerating Government of Canada service delivery on AWS. The repository provides cloud starter patterns for teams seeking standardized deployments.

PowerShell reference implementation for an Azure landing-zone base cloud architecture. It documents reusable public-sector patterns for secure cloud account and network foundations.

Terraform module for provisioning managed MSSQL servers in Azure. The project separates server-level infrastructure concerns so teams can compose larger cloud-native data platforms.

Terraform module that defines network components for Advanced Analytics Workspaces. It supports standardized deployment of secure analytics networking in Statistics Canada cloud environments.

Terraform module for deploying kube-prometheus-stack into Kubernetes clusters. It gives platform teams a reusable way to install observability components for cloud-native analytics services.

GitHub Action that forwards data from a previous CI step into Microsoft Sentinel. It supports security-monitoring workflows by connecting repository automation with cloud security tooling.

Plugin work around inbound routing for Aries Cloud Agent Python deployments. It helps digital-trust teams operate agent networks and route messages in verifiable credential ecosystems.

OpenTofu is an open-source software project focused on infrastructure as code, devops, cloud. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Pulumi is an open-source software project focused on infrastructure as code, devops, cloud. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Open Policy Agent is an open-source software project focused on policy, security, cloud native. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Rclone is an open-source software project focused on cloud storage, sync, backup. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

MinIO is an open-source software project focused on object storage, cloud, self hosted. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Ceph is an open-source software project focused on distributed storage, cloud, cluster. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

OpenIO SDS is an open-source software project focused on object storage, distributed, cloud. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

CloudPanel is an open-source software project focused on hosting, control panel, server. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Tsuru is an open-source software project focused on paas, containers, cloud. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

OpenFaaS is an open-source software project focused on serverless, containers, cloud. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Knative is an open-source software project focused on serverless, kubernetes, cloud. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Apache OpenWhisk is an open-source software project focused on serverless, cloud, functions. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

OpenNebula is an open-source software project focused on cloud, virtualization, iaas. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Apache CloudStack is an open-source software project focused on cloud, virtualization, iaas. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

OpenStack is an open-source software project focused on cloud, virtualization, iaas. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

KubeVirt is an open-source software project focused on virtualization, kubernetes, cloud. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Multipass is an open-source software project focused on virtualization, development, cloud. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

A self-hosted collaboration platform for files, calendars, contacts, communication, and productivity.

A file synchronization and sharing platform for private cloud deployments.

A high-performance file synchronization and sharing system with team collaboration features.

A desktop and mobile tool that encrypts files before they are stored in cloud services.

A photogrammetry toolkit for processing aerial drone images into maps, models, and point clouds.

Government of Canada experimental recruiting and talent platform exploring new public-sector hiring models.

Secure container runtime combining container workflows with lightweight virtual machines.

Virtual machine monitor for creating secure, lightweight microVMs.

Virtual machine monitor for modern cloud workloads written primarily in Rust.

Kubernetes components for deploying and managing serverless workloads and autoscaling services.

Kubernetes eventing infrastructure for loosely coupled, event-driven applications.

Kubernetes event-driven autoscaler for scaling workloads based on external event sources.

Container-native workflow engine for orchestrating parallel jobs on Kubernetes.

Event-driven workflow automation framework for Kubernetes.

Cloud-native lifecycle toolkit for metrics-driven deployment and application operations.

Kubernetes control-plane framework for managing cloud infrastructure and platform APIs.

Metal-as-a-service provisioning system for managing physical servers like cloud resources.

Distributed block storage system for Kubernetes clusters.

Cloud-native storage orchestrator that manages storage systems such as Ceph through Kubernetes operators.

Container-attached storage platform providing persistent storage for Kubernetes workloads.

Audio, video, chat, and collaboration app for Nextcloud.