diff --git a/README.md b/README.md
index e697809..95a5419 100644
--- a/README.md
+++ b/README.md
@@ -53,3 +53,5 @@ Ideally for maximum privacy you'd push the entire VM to the provider but that ca
 - [Building GPU TEEs using CPU Secure Enclaves with GEVisor](https://dl.acm.org/doi/pdf/10.1145/3620678.3624659)
 - [Constellation - Always encrypted kubernetes](https://github.com/edgelesssys/constellation?tab=readme-ov-file)
 - [Garmine Shielded Containers](https://github.com/gramineproject/gsc)
+- [Confidential containers in kubernetes](https://archive.is/u1vhR)
+- [Garmine library OS - run applications in enclaves](https://github.com/gramineproject/gramine/tree/master?tab=readme-ov-file)