ASH is an extensible, open source SAST, SCA, and IaC security scanner orchestration engine.
Node, Python, Java Repository of sample Custom Rules for AWS Config.
Git-secrets is a security utility designed to prevent the accidental exposure of sensitive credentials by integrating automated scanning directly into the version control commit lifecycle. It functions as a commit scanner that evaluates staged files and commit messages against defined security policies before changes are finalized in a repository. The tool utilizes regular expression pattern matching to identify potential secrets and supports the registration of custom patterns to address specific organizational security requirements. To manage operational friction, it includes mechanisms for
Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans/configurations against those rules. Take this survey to provide feedback about cfn-guard: https://amazonmr.au1.qualtrics.com/jfe/form/SV_bpyzpfoYGGuuUl0
a framework for building java codemods
The main features of pixee/codemodder-java are: Infrastructure Security.
Open-source alternatives to pixee/codemodder-java include: aws-samples/automated-security-helper — ASH is an extensible, open source SAST, SCA, and IaC security scanner orchestration engine. awslabs/aws-config-rules — [Node, Python, Java] Repository of sample Custom Rules for AWS Config. awslabs/git-secrets — Git-secrets is a security utility designed to prevent the accidental exposure of sensitive credentials by integrating… bridgecrewio/checkov — Checkov is a static analysis tool and security scanner designed to identify misconfigurations in infrastructure as… bridgecrewio/yor — Extensible auto-tagger for your IaC files. The ultimate way to link entities in the cloud back to the codified… aws-cloudformation/cloudformation-guard — Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data…