Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans/configurations against those rules. Take this survey to provide feedback about cfn-guard: https://amazonmr.au1.qualtrics.com/jfe/form/SV_bpyzpfoYGGuuUl0
Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.
Grype is a command-line security scanner designed to identify known vulnerabilities within container images, filesystems, and software manifests. It functions as a software composition analysis tool that detects security flaws in application components and open-source libraries to support supply chain security. The tool distinguishes itself by reconstructing the final state of container images through layered filesystem inspection and normalizing diverse package formats into a unified dependency graph. It maintains a local cache of security advisories synchronized from multiple upstream sourc
Tool to check the validity of Puppet metadata.json files
Die Hauptfunktionen von voxpupuli/metadata-json-lint sind: Infrastructure and Configuration.
Open-Source-Alternativen zu voxpupuli/metadata-json-lint sind unter anderem: aws-cloudformation/cloudformation-guard — Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data… awslabs/cfn-python-lint — CloudFormation Linter. cesar-rodriguez/terrascan — Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud… coreos/clair — Clair is a container vulnerability scanner that performs static analysis of container images to identify known… digitalocean/clusterlint — A best practices checker for Kubernetes clusters. 🤠. anchore/grype — Grype is a command-line security scanner designed to identify known vulnerabilities within container images,…