Skip to content

Latest commit

 

History

History
12 lines (9 loc) · 1.03 KB

tools.md

File metadata and controls

12 lines (9 loc) · 1.03 KB

Not The Hidden Wiki

IaC


  1. tfsec is a static analysis tool that scans Terraform code for security vulnerabilities and misconfigurations​ - link
  2. Snyk that detects, tracks, and alerts on infrastructure drift - link
  3. Checov it scans cloud infrastructure configurations to detect security and compliance misconfigurations - link
  4. Terrascan IaC to mitigate risk before provisioning cloud-native infrastructure. It supports frameworks:Terraform, AWS CloudFormation, and Kubernetes - link
  5. Terraform compliance a lightweight, security and compliance focused test framework against terraform to enable negative testing capability - link
  6. Ansible Collection that provides comprehensive security hardening for many Linux operating systems, MySQL, Nginx, and OpenSSH - link