cilium/ebpf

bpfvet: analyzes compiled .bpf.o files and reports minimum kernel version, helpers, maps, and portability issues

bpfvet brings kernel-version guardrails to eBPF development—an open-source analyzer that extracts minimum kernel requirements and portability constraints from compiled binaries across C, Rust, Go, and Zig for CI/CD enforcement.

How GitHub uses eBPF to improve deployment safety

GitHub published a technical deep-dive on how they use eBPF (extended Berkeley Packet Filter) to prevent circular dependencies in their deployment system. The approach selectively monitors and blocks deployment script...