1.aquasecurity / trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
+184 stars
from 38,714 · score 5.22
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
19 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
2.hashicorp / terraform
Terraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.
+163 stars
from 50,183 · score 5.10
3.kestra-io / kestra
Orchestrate everything, everywhere. The open-source control plane for workflows across data, infrastructure, business processes and AI agents. Declarative YAML, event-driven, any language, Git-versioned, scalable to millions of executions.
+110 stars
from 29,997 · score 4.71
4.encoredev / encore
Infrastructure orchestration from local to your cloud
+96 stars
from 12,580 · score 4.57
5.meshery / meshery
Meshery, the cloud native manager
+53 stars
from 12,052 · score 3.99
6.Rocky-true / vmware-to-kubernetes
Kubernetes 自动化运维与迁移工具：阿里云 3 主 HA、Compose→K8s、Terraform、Kubekey、部署验证与故障排查。Kubernetes automation, migration and ops toolkit.
+51 stars
from 106 · score 3.95
7.bridgecrewio / checkov
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
+26 stars
from 9,100 · score 3.30
8.crossplane / crossplane
The Cloud Native Control Plane
+24 stars
from 12,192 · score 3.22
9.pulumi / pulumi
Pulumi - Infrastructure as Code in any programming language 🚀
+23 stars
from 25,815 · score 3.18
10.infracost / infracost
Cloud cost intelligence for engineers, AI coding agents, and CI/CD 💰📉 Shift FinOps Left!
+12 stars
from 12,588 · score 2.56
11.antonbabenko / terraform-skill
Terraform & OpenTofu Skill for AI Agents - testing, modules, CI/CD, and production patterns
+8 stars
from 2,426 · score 2.20
12.stategraph / stategraph
Terraform without the state file bottleneck
+7 stars
from 1,315 · score 2.08
13.aws / aws-cdk
The AWS Cloud Development Kit is a framework for defining cloud infrastructure in code
+5 stars
from 12,954 · score 1.79
14.goss-org / goss
Quick and Easy server testing/validation
+4 stars
from 5,996 · score 1.61
15.diggerhq / digger
Digger is an open source IaC orchestration tool. Digger allows you to run IaC in your existing CI pipeline ⚡️
+4 stars
from 5,058 · score 1.61
16.Checkmarx / kics
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
+2 stars
from 2,726 · score 1.10
17.nitrictech / nitric
Nitric is a multi-language framework for cloud applications with infrastructure from code.
+2 stars
from 2,018 · score 1.10
18.itamae-kitchen / itamae
Configuration management tool inspired by Chef, but simpler and lightweight. Formerly known as Lightchef.
+1 stars
from 1,134 · score 0.69
19.cpeoples / ansible-security-scanner
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
+1 stars
from 11 · score 0.69