bridgecrewio/checkov :fire::fire::fire::fire::fire:
Static analysis for infrastructure as code manifests (Terraform, Kubernetes, Cloudformation, Helm, Dockerfile, Kustomize) find security misconfiguration and fix them.
Docker › Security: “Static analysis for infrastructure as code manifests (Terraform, Kubernetes, Cloudformation, Helm, Dockerfile, Kustomize) find security misconfiguration and fix them.”
Security › Web > Development: “A static analysis tool for infrastucture as code (Terraform).”
Amazon Web Services › Open Source Repos > Security: “Terraform static analysis, verifies security best practices.”
Terraform › Tools: “Terraform static analysis tool for terraform>=0.12”
DevSecOps › Tools > Infrastructure as Code Analysis > Multi-Platform: “Bridgecrew - Scan Terraform, AWS CloudFormation and Kubernetes templates for insecure configuration.”
OpenTofu › Tools > Tests: “Static analysis tool that scans Terraform and OpenTofu templates for security and compliance misconfigurations.”