Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Repository Index
47,133 repositories indexed
1–9 of 9 · Most stars
Tfsec is now part of Trivy
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
- tokenization
- web-security
- compliance
- security
Linting tool for CloudFormation templates
- continuous-testing
- unit-testing
- cloudformation
- aws
Cross-platform config file CLI toolchain. Validates syntax, schema compliance, and formatting across 18 different configuration file types. Written in Go.
In the midst of all the tools out there that you can possibly use to keep track of them. Here's a "shovel" that just works to try them all out.
The EU & UK compliance plane for Google ADK.