Discover bridgecrewio/aws-collect-unused-security-groups Open Source

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

6,654

terragoat

Extensible auto-tagger for your IaC files. The ultimate way to link entities in the cloud back to the codified resource which created it.

1,116

yor

778

AirIAM

Least privilege AWS IAM Terraformer

This GitHub Action runs Checkov against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.

750

checkov-action

Cfngoat is Bridgecrew's "Vulnerable by Design" Cloudformation repository. Cfngoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

225

cfngoat

helm-scanner

Open source IaC security scanner for public Helm charts

This GitHub Action runs Bridgecrew against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.

bridgecrew-action

checkov-vscode

Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework, and other infrastructure-as-code-languages with Checkov by Bridgecrew in your VSCODE IDE.

Vulnerable Kustomize Kubernetes templates for training and education

kustomizegoat

HTML

terraform-aws-session-manager

Terraform module for deploying AWS Session Manager

CdkGoat is Bridgecrew's "Vulnerable by Design" AWS CDK repository. CdkGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

cdkgoat

A module that backs up and restores route53 zones and records

terraform-aws-route53-backup-restore

redshirts

yor-action

Github action for Yor

Super-powered know how tools for AWS and GCP cloud security

HowCrew

This CircleCI Orb Action runs Bridgecrew analysis of Infrastructure-as-Code repository. Bridgecrerw performs static security analysis of Terraform, CloudFormation and Kubernetes Infrastructure code security

bridgecrew-orb

whorf

AWS CDK policy validation plugin powered by checkov

cdk-validator-checkov

BicepGoat is Bridgecrew's "Vulnerable by Design" Bicep and ARM repository. BicepGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

bicepgoat

Bicep

jsonpath-ng

Finally, a JSONPath implementation for Python that aims to be standard compliant. That's all. Enjoy it.

Jupyter notebooks of various cloud security subjects

cloud-security-notebooks

Jupyter Notebook

terraform-provider-bridgecrew

USE https://github.com/paloaltonetworks/terraform-provider-bridgecrew

terraform-aws-secured-postgresql-rds

A Terraform module to create an Amazon Web Services (AWS) PostgreSQL Relational Database Server (RDS) in a VPC, NAT implementing security best practices.

Integrations that supported by Bridgecrew. Each integration collect data from different sensors and send the log data to Bridgecrew

bridgecrew-integrations

Bridgecrew READ ONLY integration module

bridgecrew-kubernetes

Resources for Kubernetes

terraform-aws-bridgecrew-read-only

Integrate your AWS account Cloudtrail with Bridgecrew

terraform-aws-bridgecrew-cloudtrail

Connecting your GCP project to Bridgecrew

terraform-google-bridgecrew-gcp-read-only

Checkov is a static code analysis tool for infrastructure as code.The Checkov Plugin for Intellij enables developers to get real-time scan results, as well as inline fix suggestions as they develop cloud infrastructure.

aws-modernization-workshop-bridgecrew

HTML

checkov-jetbrains-ide

Kotlin

terraform-azurerm-bridgecrew-azure-read-only

Read Only module to connect Azure subscriptions to https://bridgecrew.cloud

An enterprise friendly way of detecting and preventing secrets in code.

detect-secrets

utils for jenkins pipelines

bc-pipeline-utils

Groovy

sample-custom-checks

Example custom checks to use with the Checkov CLI.

Bridgecrew utility scripts and more.

bc-toolbox

JavaScript

terraform-aws-bridgecrew-remediation

prisma-cloud-vscode-plugin

A repository for the We Hack Purple mini-course on IaC scanning with Checkov. (https://checkov.io)

fluentd-dlp

Dockerfile

docker-syslog-integration

JavaScript

WHP_IaC_Scanning