StackGuardian/tirith

Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans/configurations against those rules. Take this survey to provide feedback about cfn-guard: https://amazonmr.au1.qualtrics.com/jfe/form/SV_bpyzpfoYGGuuUl0

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

a lightweight, security focused, BDD test framework against terraform.

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

pre-commit git hooks to take care of Terraform configurations 🇺🇦

Pike is a tool for determining the permissions or policy required for IAC code

Identify the blast radius and risks for Terraform changes in real time

Safety-first guardrails for AI-driven cloud and Kubernetes operations