advanced-security/codeql-extractor-iac

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

Static Code Analyser for Infrastructure-as-Code languages such as CloudFormation and Terraform as well as DevOps like Docker and Kubernetes

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

ASH is an extensible, open source SAST, SCA, and IaC security scanner orchestration engine.

This GitHub Action runs Checkov against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.

The CoGuard CLI Tool

Validate infrastructure as code (IaC) and DevOps repositories using GitHub Actions.

A docker container to simplify and secure the use of Infrastructure as Code (IaC)