aquasecurity / cfsecLinks
Static analysis for CloudFormation templates to identify common misconfiguration
☆57Updated 3 years ago
Alternatives and similar repositories for cfsec
Users that are interested in cfsec are comparing it to the libraries listed below
Sorting:
- vscode extension for tfsec☆30Updated 2 years ago
- a tool to audit the istio service mesh☆173Updated 3 years ago
- vexctl is a tool to attest VEX impact statements☆44Updated 2 years ago
- ☆54Updated 2 weeks ago
- Darkbit Cloud Security Tools☆25Updated 4 years ago
- ☆33Updated 2 years ago
- A tool to check the security settings of Github Organizations.☆71Updated 2 years ago
- An SBOM query language and associated utilities☆54Updated last year
- Slack alert bot for matching Github Audit Events☆10Updated 7 months ago
- ☆22Updated 2 years ago
- Compares and analyzes GCP IAM roles.☆77Updated 3 months ago
- K8s API Honeypot with Active Defense Capabilities☆40Updated last year
- Sample code snippets for consuming the CloudSploit API☆13Updated last year
- Compare vulnerability scanners results (to make them better!)☆16Updated last month
- Simple tool that allows you to detect imposter commits in GitHub Actions workflows.☆23Updated 6 months ago
- PolicyGlass allows you to analyse one or more AWS policies' effective permissions in aggregate, by restating them in the form of PolicySh…☆59Updated 3 years ago
- Security configuration checks for popular cloud native applications and infrastructure.☆118Updated 3 years ago
- Clean accounts over permissions in GCP infra at scale☆71Updated 2 years ago
- K8s Network Policy Migrator is a tool to migrate Calico or Cilium custom network policies to Kubernetes native network policy. The tool o…☆31Updated last year
- Automated determination of which AWS services run where☆20Updated last week
- Kubernetes admission webhook that uses cosign verify to check the subject and issuer of the image matches what you expect☆23Updated 2 weeks ago
- A recon tool for GCP Service Account Keys that requires no permissions☆22Updated 2 months ago
- Open-source proof-of-concept client for AWS IAM Roles Anywhere☆71Updated 2 years ago
- ☆113Updated this week
- Offensive Terraform Website☆45Updated 4 years ago
- Rego policies for enterprise-scale Compliance-as-Code with OPA Conftest.☆58Updated last year
- Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).☆143Updated last month
- Open Source runtime scanner for k8s cluster and perform security audit checks based on CIS Kubernetes Benchmark specification☆67Updated 5 months ago
- OpenCSPM Community Controls☆14Updated 4 years ago
- Run compliance and security controls to detect Terraform AWS resources deviating from security best practices prior to deployment using P…☆27Updated 7 months ago