How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
Tool to check the validity of Puppet metadata.json files
The main features of voxpupuli/metadata-json-lint are: Infrastructure and Configuration.
Open-source alternatives to voxpupuli/metadata-json-lint include: aws-cloudformation/cloudformation-guard — Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data… awslabs/cfn-python-lint — CloudFormation Linter. cesar-rodriguez/terrascan — Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud… coreos/clair — Clair is a container vulnerability scanner that performs static analysis of container images to identify known… digitalocean/clusterlint — A best practices checker for Kubernetes clusters. 🤠. anchore/grype — Grype is a command-line security scanner designed to identify known vulnerabilities within container images,…
Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans/configurations against those rules. Take this survey to provide feedback about cfn-guard: https://amazonmr.au1.qualtrics.com/jfe/form/SV_bpyzpfoYGGuuUl0
Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.
Grype is a command-line security scanner designed to identify known vulnerabilities within container images, filesystems, and software manifests. It functions as a software composition analysis tool that detects security flaws in application components and open-source libraries to support supply chain security. The tool distinguishes itself by reconstructing the final state of container images through layered filesystem inspection and normalizing diverse package formats into a unified dependency graph. It maintains a local cache of security advisories synchronized from multiple upstream sourc