Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Repository Index
47,133 repositories indexed
1–8 of 8 · Most stars
Tfsec is now part of Trivy
Digger is an open source IaC orchestration tool. Digger allows you to run IaC in your existing CI pipeline ⚡️
- infrastructure-as-code
- terraform
- terraformcloud
- tacos
Artificial Intelligence Infrastructure-as-Code Generator.
Terraform without the state file bottleneck
- automation
- cloud-management
- devops
- github-actions
Plan and apply Terraform/OpenTofu via PR automation, using best practices for secure and scalable IaC workflows.
Hide secrets like API keys, passwords and tokens in Neovim while screen sharing or streaming. Masks .env, JSON, YAML, TOML, XML, .http, Terraform/HCL and Dockerfiles with extmarks, without changing the file. Presentation mode, screen shield, picker and terminal masking.
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
- ansible
- ansible-playbook
- devsecops
- infrastructure-as-code