bridgecrewio/WHP_IaC_Scanning

Stars
1
Language HCL
License
MIT License
Created about 3 years ago
Updated almost 3 years ago

bridgecrewio/WHP_IaC_Scanning

bridgecrewio

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

A repository for the We Hack Purple mini-course on IaC scanning with Checkov. (https://checkov.io)

checkov

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

terragoat

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

yor

Extensible auto-tagger for your IaC files. The ultimate way to link entities in the cloud back to the codified resource which created it.

AirIAM

Least privilege AWS IAM Terraformer

checkov-action

This GitHub Action runs Checkov against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.

cfngoat

Cfngoat is Bridgecrew's "Vulnerable by Design" Cloudformation repository. Cfngoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

helm-scanner

Open source IaC security scanner for public Helm charts

bridgecrew-action

This GitHub Action runs Bridgecrew against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.

checkov-vscode

Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework, and other infrastructure-as-code-languages with Checkov by Bridgecrew in your VSCODE IDE.

kustomizegoat

Vulnerable Kustomize Kubernetes templates for training and education

terraform-aws-session-manager

Terraform module for deploying AWS Session Manager

cdkgoat

CdkGoat is Bridgecrew's "Vulnerable by Design" AWS CDK repository. CdkGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

redshirts

terraform-aws-route53-backup-restore

A module that backs up and restores route53 zones and records

yor-action

Github action for Yor

HowCrew

Super-powered know how tools for AWS and GCP cloud security

bridgecrew-orb

This CircleCI Orb Action runs Bridgecrew analysis of Infrastructure-as-Code repository. Bridgecrerw performs static security analysis of Terraform, CloudFormation and Kubernetes Infrastructure code security

whorf

cdk-validator-checkov

AWS CDK policy validation plugin powered by checkov

bicepgoat

BicepGoat is Bridgecrew's "Vulnerable by Design" Bicep and ARM repository. BicepGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

jsonpath-ng

Finally, a JSONPath implementation for Python that aims to be standard compliant. That's all. Enjoy it.

cloud-security-notebooks

Jupyter notebooks of various cloud security subjects

Jupyter Notebook

aws-collect-unused-security-groups

Track unused security groups of an AWS account over period of time with control of the interval to sample the security groups

terraform-provider-bridgecrew

USE https://github.com/paloaltonetworks/terraform-provider-bridgecrew

terraform-aws-secured-postgresql-rds

A Terraform module to create an Amazon Web Services (AWS) PostgreSQL Relational Database Server (RDS) in a VPC, NAT implementing security best practices.

bridgecrew-integrations

Integrations that supported by Bridgecrew. Each integration collect data from different sensors and send the log data to Bridgecrew

aws-modernization-workshop-bridgecrew

bridgecrew-kubernetes

Resources for Kubernetes

terraform-aws-bridgecrew-read-only

Bridgecrew READ ONLY integration module

terraform-aws-bridgecrew-cloudtrail

Integrate your AWS account Cloudtrail with Bridgecrew

terraform-google-bridgecrew-gcp-read-only

Connecting your GCP project to Bridgecrew

checkov-jetbrains-ide

Checkov is a static code analysis tool for infrastructure as code.The Checkov Plugin for Intellij enables developers to get real-time scan results, as well as inline fix suggestions as they develop cloud infrastructure.

terraform-azurerm-bridgecrew-azure-read-only

Read Only module to connect Azure subscriptions to https://bridgecrew.cloud

bc-pipeline-utils

utils for jenkins pipelines

sample-custom-checks

Example custom checks to use with the Checkov CLI.

bc-toolbox

Bridgecrew utility scripts and more.

terraform-aws-bridgecrew-remediation

prisma-cloud-vscode-plugin

fluentd-dlp

docker-syslog-integration

checkov-pre-receive-hooks

yor-choco

bridgecrew-py

iam-alerting-cleanup

prisma-cloud-jetbrains-ide

The Prisma cloud Plugin for Intellij enables developers to get real-time scan results, as well as inline fix suggestions as they develop cloud infrastructure.