coguardio/coguard-cli

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

Cloud Security Posture Management (CSPM)

An open source, cloud-native security to protect everything from build to runtime

ASH is an extensible, open source SAST, SCA, and IaC security scanner orchestration engine.

This GitHub Action runs Checkov against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.

The Clouditor is a tool to support continuous cloud assurance. Developed by Fraunhofer AISEC.

Automating situational awareness for cloud penetration tests.