aquasecurity/tfsec

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

CLI tool to generate terraform files from existing infrastructure (reverse Terraform). Infrastructure to Code

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

Terraform Pull Request Automation