7407 Open source projects that are alternatives of or similar to Tfsec

Run a security scan on your terraform with the very nice https://github.com/liamg/tfsec

Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework and other infrastructure-as-code-languages with Checkov by Bridgecrew.

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues

Kubernetes-based Dev Environments with GitOps

Reads from existing Cloud Providers (reverse Terraform) and generates your infrastructure as code on Terraform configuration

Terraform DigitalOcean provider

Terraform module for AWS GitLab runners on ec2 (spot) instances

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

INTERCEPT / Policy as Code Static Analysis Auditing / SAST

Small tool to convert an IAM Policy in JSON format into a Terraform aws_iam_policy_document

Terratag is a CLI tool that enables users of Terraform to automatically create and maintain tags across their entire set of AWS, Azure, and GCP resources

Minimal and free Kubernetes distribution with Terraform

Deploy your apps on any Cloud provider in just a few seconds

Cloud cost estimates for Terraform in pull requests💰📉 Love your cloud bill!

Library and CLI tool for analysing CloudFormation templates and check them for security compliance.

⚙️ Scan your Java, Kotlin, PHP, Python, JavaScript, TypeScript projects at GitHub with Qodana

CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.

Ops - cli wrapper for Terraform, Ansible, Helmfile and SSH for cloud automation

Knowledge seeks no man

Android in docker solution with noVNC supported and video recording

Info about many of my Terraform, AWS, and DevOps projects.

A collection of bash shell scripts for automating various tasks with Amazon Web Services using the AWS CLI and jq.

The AWS Cloud Development Kit is a framework for defining cloud infrastructure in code

Check Point CloudGuard Network Security repository containing solution templates, Terraform templates, tools and scripts for deploying and configuring CloudGuard Network Security products.

Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

Offensive Terraform Website

Scalable PaaS (automated Docker+nginx) - aka Heroku on Steroids

An operator to fetch secrets from cloud services and inject them in Kubernetes

Terraform Template to Setup a Kubernetes Cluster on OpenStack/AWS/Azure

A batteries included cloud-init config to quickly and easily deploy a single Docker image or Docker Compose file to any Cloud™ VM.

Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 200 controls covering CIS, ISO27001, GDPR, HIPAA, SOC2, ENS and other security frameworks.

Terraform GitOps Framework — Everything you need to build reliable automation for AKS, EKS and GKE Kubernetes clusters in one free and open-source framework.

Pulumi - Developer-First Infrastructure as Code. Your Cloud, Your Language, Your Way 🚀

CLI tool to generate terraform files from existing infrastructure (reverse Terraform). Infrastructure to Code

Terraform AWS Auto Scaling Stack

SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs). 🌈

🚀 Geodesic is a DevOps Linux Distro. We use it as a cloud automation shell. It's the fastest way to get up and running with a rock solid Open Source toolchain. ★ this repo! https://slack.cloudposse.com/

Terraform Modules

A Drone plugin for caching current workspace files between builds to reduce your build times

Example on how to create a AWS Lambda triggered by SQS in Terraform

Fully open-source security audit for project dependencies based on known vulnerabilities and advisories. Supports both local repos and container images. Integrates with various CI environments such as Azure Pipelines, CircleCI and Google CloudBuild. No server required!

Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP, DNS, Elastic, Network, Virtualization. DevOps Interview Questions

AWS Lambda using Terraform., an Introductory Cookbook

Self service web portal for different Cloud platforms like Azure, AWS and VMWare vSphere.

🐳🐳🐳 This repository is part of a blog series on Docker Swarm example using VirtualBox, OVH Openstack, Azure and Amazon Web Services AWS

Automated SAP/HA Deployments in Public/Private Clouds

Terraform module to deploy an Apache Airflow cluster on AWS, backed by RDS PostgreSQL for metadata, S3 for logs and SQS as message broker with CeleryExecutor

🌍 📋 A web dashboard to inspect Terraform States

This project is archived, but the idea of Terrastack lives on in the Terraform CDK. - https://github.com/hashicorp/terraform-cdk

A Terraform module for hosting your own runner for CI/CD on Digital Ocean to run jobs in your GitHub Actions workflows. 🚀

AWS-powered serverless build, test and deploy pipeline ft. multiple environments

A Table of Contents of all Gruntwork Code

Databricks Terraform Provider

Command line tool to validate configuration files

Terraform automation for Cloud

A Terraform module to create and maintain Kubernetes clusters on AWS easily, relying entirely on kops

cloudquery transforms your cloud infrastructure into SQL or Graph database for easy monitoring, governance and security.

MutiCloud_Overlay demonstrates a use case of overlay over one or more clouds such as AWS, Azure, GCP, OCI, Alibaba and a vSphere private infrastructure in Hub and spoke topology, point to point topology and in a Single cloud. Overlay protocols IPv6 and IPv4 are independent of underlying infrastructure. This solution can be integrated with encryption and additional security features.

🚧 Learn the craft of "DevOps" (Developer Operations) to Deploy your App and Monitor it so it stays "Up"!