kubectl image: one Kubernetes minor per tag, rebuilt weekly, signed; a drop-in for bitnami/kubectl

Client-side AWS IAM policy blast-radius analyzer (fail-closed): web tool, CLI with SARIF output, and a GitHub Action on the Marketplace.

Automated feature selection for tabular ML using XGBoost, SHAP and Optuna. Ranks features on held-out data and flags each as Keep, Caution or Drop.