PANW AppSec ORG

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

Open-source security scanner that reads your infrastructure-as-code files (Terraform, Kubernetes, Docker, CloudFormation) before deployment and flags misconfigurations and leaked secrets.

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

Extensible auto-tagger for your IaC files. The ultimate way to link entities in the cloud back to the codified resource which created it.

Least privilege AWS IAM Terraformer

This GitHub Action runs Checkov against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.

Cfngoat is Bridgecrew's "Vulnerable by Design" Cloudformation repository. Cfngoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

Open source IaC security scanner for public Helm charts

This GitHub Action runs Bridgecrew against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.

Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework, and other infrastructure-as-code-languages with Checkov by Bridgecrew in your VSCODE IDE.

CdkGoat is Bridgecrew's "Vulnerable by Design" AWS CDK repository. CdkGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

Vulnerable Kustomize Kubernetes templates for training and education

Terraform module for deploying AWS Session Manager

A module that backs up and restores route53 zones and records

No description.

Github action for Yor

Super-powered know how tools for AWS and GCP cloud security

No description.

CLI tool to generate terraform files from existing infrastructure (reverse Terraform). Infrastructure to Code

AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of the CIS Amazon Web Services Foundations Benchmark and DOZENS of additional checks including GDPR and HIPAA (+100). Official CIS for AWS guide: https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf

This CircleCI Orb Action runs Bridgecrew analysis of Infrastructure-as-Code repository. Bridgecrerw performs static security analysis of Terraform, CloudFormation and Kubernetes Infrastructure code security

"Vulnerable by Design" supply chain is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

AWS CDK policy validation plugin powered by checkov

Finally, a JSONPath implementation for Python that aims to be standard compliant. That's all. Enjoy it.

BicepGoat is Bridgecrew's "Vulnerable by Design" Bicep and ARM repository. BicepGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

An enterprise friendly way of detecting and preventing secrets in code.

USE https://github.com/paloaltonetworks/terraform-provider-bridgecrew

Jupyter notebooks of various cloud security subjects

Track unused security groups of an AWS account over period of time with control of the interval to sample the security groups

No description.

A Terraform module to create an Amazon Web Services (AWS) PostgreSQL Relational Database Server (RDS) in a VPC, NAT implementing security best practices.

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

No description.

Resources for Kubernetes

Bridgecrew READ ONLY integration module

Integrate your AWS account Cloudtrail with Bridgecrew

Integrations that supported by Bridgecrew. Each integration collect data from different sensors and send the log data to Bridgecrew

Kubernetes Goat is "Vulnerable by Design" Kubernetes Cluster.

A repository for the We Hack Purple mini-course on IaC scanning with Checkov. (https://checkov.io)

Checkov is a static code analysis tool for infrastructure as code.The Checkov Plugin for Intellij enables developers to get real-time scan results, as well as inline fix suggestions as they develop cloud infrastructure.

No description.

Nuke a whole AWS account and delete all its resources.

Read Only module to connect Azure subscriptions to https://bridgecrew.cloud

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

Connecting your GCP project to Bridgecrew

No description.

Add extra information of your AWS CodeBuild build via environment variables.

Example custom checks to use with the Checkov CLI.

Bridgecrew utility scripts and more.

utils for jenkins pipelines

No description.

No description.

The Prisma cloud Plugin for Intellij enables developers to get real-time scan results, as well as inline fix suggestions as they develop cloud infrastructure.

No description.

No description.

No description.

No description.

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

No description.

No description.

Collection of GitHub Actions reusable workflows

No description.

No description.

This repository is the place to post issues you face while using the various IDE plugins offered by Prisma Cloud

No description.

SeaweedFS is a fast distributed storage system for blobs, objects, files, and data lake, for billions of files! Blob store has O(1) disk seek, cloud tiering. Filer supports Cloud Drive, cross-DC active-active replication, Kubernetes, POSIX FUSE mount, S3 API, S3 Gateway, Hadoop, WebDAV, encryption, Erasure Coding.

A fork of the original semgrep

No description.

Terraform module that sets up CORS

No description.

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

A simple and beautiful text diff viewer component made with Diff and React.

No description.

No description.

Generate CloudFormation / Terraform / Troposphere templates from your existing AWS resources.

Serverless.js plugin that implements AWS Lambda Layers which reduces drastically lambda size, warm-up and deployment time.

yq is a portable command-line YAML processor

No description.

No description.

Terraform module which creates EC2-VPC security groups on AWS

No description.

Landing page for #CodifiedSecurity community slack

Action for create pull request in another repository

GoFormation is a Go library for working with CloudFormation templates.

Consider it goformation for the serverless project

Golang wrapper for the terraform CLI tool

A CLI that utilizes Okta IdP via SAML to acquire temporary AWS credentials

Terraform modules for Fyde products

Ansible playbook to register Bridgecrew platform on an AWS account

Porting Grav Learn theme to Hugo

Terraform module that creates an S3 bucket with an optional IAM user for external CI/CD systems

Terraform enables you to safely and predictably create, change, and improve infrastructure. It is an open source tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.

This module creates an S3 bucket suitable for receiving logs from other AWS services such as S3, CloudFront, and CloudTrail

Curator: Tending your Elasticsearch indices

No description.

Public Slack organizations made easy (extended fork of rauchg/slackin)

Terraform module to create an Elastic Kubernetes (EKS) cluster and associated worker instances on AWS

A Serverless Developer Portal for easily publishing and cataloging APIs

LambdaGuard: AWS Serverless Security

Parse ARNs using Python

PCI Deployable Architecture on GCP with Terraform