Bridgecrew

Repositories

• terragoat

  TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

  terraform aws-security goat devsecops cloud-security azure-security gcp-security
  HCL Apache-2.0 181 511 1 1 Updated May 27, 2021

• checkov

  Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework and other infrastructure-as-code-languages with Checkov by Bridgecrew.

  kubernetes aws devops cloudformation azure terraform static-analysis
  Python Apache-2.0 329 2,719 105 (2 issues need help) 15 Updated May 27, 2021

• yor-action

  Github action for Yor
  Shell Apache-2.0 1 2 0 0 Updated May 27, 2021

• homebrew-tap
  Ruby 0 0 0 0 Updated May 27, 2021

• yor

  Extensible auto-tagger for your IaC files. The ultimate way to link entities in the cloud back to the codified resource which created it.

  devops cloud cloudformation serverless terraform tagging iac
  Go Apache-2.0 6 71 1 1 Updated May 27, 2021

• checkov-action

  A Github Action to run Checkov against an Infrastructure-as-Code repository. Checkov does static security analysis of Terraform, CloudFormation, Kubernetes, serverless framework and ARM templates

  marketplace
  Shell Apache-2.0 18 44 8 (1 issue needs help) 1 Updated May 27, 2021

• bridgecrew-action

  This Github Action runs Bridgecrew against an Infrastructure-as-Code repository. Bridgecrew performs static security analysis of Terraform & CloudFormation Infrastructure code.

  github marketplace static-analysis actions github-actions bridgecrew
  Shell MIT 7 27 2 0 Updated May 27, 2021

• checkov-theme-2
  HTML 1 0 0 8 Updated May 27, 2021

• yor-theme

  Forked from sincspecv/yorn
  HTML 1 0 0 0 Updated May 26, 2021

• terraform-aws-session-manager

  Terraform module for deploying AWS Session Manager
  HCL Apache-2.0 9 11 2 3 Updated May 25, 2021

• terraform-google-bridgecrew-gcp-read-only

  Connecting your GCP project to Bridgecrew
  HCL 3 3 0 0 Updated May 25, 2021

• go-terraform

  Forked from getlunaform/go-terraform

  Golang wrapper for the terraform CLI tool
  Go LGPL-3.0 1 0 0 0 Updated May 24, 2021

• checkov-vscode

  Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework, and other infrastructure-as-code-languages with Checkov by Bridgecrew in your VSCODE IDE.

  kubernetes cloudformation terraform static-analysis serverless-framework vscode-extension checkov
  TypeScript Apache-2.0 8 27 2 0 Updated May 13, 2021

• cloudmapper

  Forked from duo-labs/cloudmapper

  CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

  aws aws-security
  JavaScript BSD-3-Clause 608 1 0 4 Updated May 12, 2021

• aws-api-gateway-developer-portal

  Forked from awslabs/aws-api-gateway-developer-portal

  A Serverless Developer Portal for easily publishing and cataloging APIs
  JavaScript Apache-2.0 268 0 0 6 Updated May 12, 2021

• react-diff-viewer

  Forked from praneshr/react-diff-viewer

  A simple and beautiful text diff viewer component made with Diff and React.
  TypeScript MIT 90 0 0 9 Updated May 12, 2021

• HowCrew

  Super-powered know how tools for AWS and GCP cloud security

  aws aws-security vpc-flow-logs gcp-security
  Python Apache-2.0 2 8 0 8 Updated May 11, 2021

• goserverless

  Forked from thepauleh/goserverless

  Consider it goformation for the serverless project
  Go MIT 3 0 0 0 Updated May 9, 2021

• helm-scanner

  Open source IaC security scanner for public Helm charts
  Python 2 9 0 0 Updated May 5, 2021

• terraformer

  Forked from GoogleCloudPlatform/terraformer

  CLI tool to generate terraform files from existing infrastructure (reverse Terraform). Infrastructure to Code
  Go Apache-2.0 551 2 0 5 Updated Apr 19, 2021

• gimme-aws-creds

  Forked from Nike-Inc/gimme-aws-creds

  A CLI that utilizes Okta IdP via SAML to acquire temporary AWS credentials
  Python Apache-2.0 177 0 0 0 Updated Apr 13, 2021

• cfngoat

  Cfngoat is Bridgecrew's "Vulnerable by Design" Cloudformation repository. Cfngoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

  cloudformation aws-security cloudsecurity devsecops
  67 45 0 1 Updated Apr 9, 2021

• terraform-aws-s3-bucket

  Forked from cloudposse/terraform-aws-s3-bucket

  Terraform module that creates an S3 bucket with an optional IAM user for external CI/CD systems
  HCL Apache-2.0 110 0 0 0 Updated Apr 1, 2021

• prowler

  Forked from toniblyx/prowler

  AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of the CIS Amazon Web Services Foundations Benchmark and DOZENS of additional checks including GDPR and HIPAA (+100). Official CIS for AWS guide: https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf

  aws aws-security
  Shell 648 10 0 0 Updated Mar 29, 2021

• terraform-azurerm-bridgecrew-azure-read-only

  Read Only module to connect Azure subscriptions to https://bridgecrew.cloud
  HCL 1 3 0 1 Updated Mar 26, 2021

• checkov-theme

  Forked from orema10/checkov-theme
  CSS 2 0 0 2 Updated Mar 26, 2021

• cloudsplaining

  Forked from salesforce/cloudsplaining

  Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.
  JavaScript BSD-3-Clause 87 0 0 0 Updated Mar 23, 2021

• sample-custom-checks

  Example custom checks to use with the Checkov CLI.
  Python 0 0 0 1 Updated Mar 17, 2021

• terraform-aws-bridgecrew-read-only

  Bridgecrew READ ONLY integration module
  HCL Apache-2.0 3 2 0 0 Updated Mar 11, 2021

• python-hcl2

  Forked from amplify-education/python-hcl2
  Python MIT 17 1 0 0 Updated Mar 5, 2021