How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
Checkov is a static analysis tool and security scanner designed to identify misconfigurations in infrastructure as code, container images, and Kubernetes configurations. It functions as a cloud security posture tool, an SCA vulnerability scanner, and a secret scanning utility to prevent security breaches and version control leaks. The project distinguishes itself through deep graph analysis and variable resolution, allowing it to map relationships between interconnected resources and evaluate the final state of infrastructure attributes. It provides extensibility for defining custom security
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
Extensible auto-tagger for your IaC files. The ultimate way to link entities in the cloud back to the codified resource which created it.
Regula checks infrastructure as code templates (Terraform, CloudFormation, k8s manifests) for AWS, Azure, Google Cloud, and Kubernetes security and compliance using Open Policy Agent/Rego
The main features of fugue/regula are: Infrastructure as Code Analysis, Workflow Automation, Workflow Utilities, Infrastructure Security.
Projects with overlapping indexed features include: bridgecrewio/checkov — Checkov is a static analysis tool and security scanner designed to identify misconfigurations in infrastructure as… checkmarx/kics — Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle… bridgecrewio/yor — Extensible auto-tagger for your IaC files. The ultimate way to link entities in the cloud back to the codified… anmolnagpal/terraform-ai-skills — 🤖 AI-powered Terraform module management across AWS, GCP, Azure, DigitalOcean - Save 97% of maintenance time. 0xdones/tfgen — Terraform code generator for consistent codebase and DRY. alexnabokikh/tfsort — A CLI utility to sort Terraform variables and outputs.
