checkov

The terranetes controller manages the lifecycle of an OpenTofu or Terraform resource, allowing developers to self-serve dependencies in a controlled manner.

GitHub Actions CI/CD - Master Template & Reusable Workflows Library - Docker Builds, AWS, Python, Terraform, Jenkins, Linting, Security Scanning, Make Builds etc.

Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework, and other infrastructure-as-code-languages with Checkov by Bridgecrew in your VSCODE IDE.

This repo accompanies my Azure DevOps Terraform Pipeline blog post. Now updated to included cost tracking.

Event-driven notification system on Kubernetes with Kafka (Strimzi) & KEDA autoscaling — secured with Trivy, Checkov, Kyverno, Falco & Velero

Production-ready AWS CloudFormation starter kit with secure OIDC authentication, automated CI/CD, and security scanning. Deploy stacks in minutes. Read the full docs ↓

Sonarqube cloudformation plugin, IaC security supports cfn-nag/checkov

This solution provides an overview of DevSecOps CICD Pipeline Implementation using AWS DevOps Services and other tools

Add an application load balancer to three Amazon EC2 instances belonging to three separate availability zones in a public subnet using Terraform and GitHub Actions.

Fast track the creation of Terraform repositories by using this simple terraform template

Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework, and other infrastructure-as-code-languages with Checkov in VS Code.

Realiza análise estática e contextual de segurança em infraestrutura Terraform, detecta misconfigurations e riscos de compliance antes do apply, calcula scores de segurança e gera sugestões de correção automática.

Paste Terraform HCL or docker-compose.yml → get a clean architecture diagram instantly. Free, open-source, runs entirely in your browser. No cloud credentials needed.

Checkov custom checks for promoting usage of ephemeral resources

🚖 ETL Platform: Analyzing NYC Yellow Taxi Trips with Airflow, FastAPI, and Cloud Integration

Demo repository for my talk at the Heise Developer Experience 2022 conference.

Cloud security intelligence platform with cross-tool integration — transform raw security scans into actionable intelligence across AWS, Azure, GCP, and Kubernetes

Production-ready AWS Terraform starter kit with secure OIDC authentication, automated CI/CD, and security scanning. Deploy infrastructure in minutes. Read the full docs ↓

Automated DevSecOps pipeline with 4-layer security: secret scanning, SAST, container vulnerability analysis, and IaC security checks — built with GitHub Actions, Trivy, Semgrep, and Checkov.