Cloud Security and Resilience: DevSecOps Tools and Practices

1. homebrew-tap

   1 5 1 5.4 Ruby

   Homebrew tap for Kubescape (by kubescape)

   

   1. Kubescape: https://github.com/kubescape/kubescape Kubescape is the first tool for testing if Kubernetes clusters are deployed securely as defined in Kubernetes Hardening Guidance by NSA and CISA.

2. CodeRabbit

   coderabbit.ai featured

   CodeRabbit: AI Code Reviews for Developers. Revolutionize your code reviews with AI. CodeRabbit offers PR summaries, code walkthroughs, 1-click suggestions, and AST-based analysis. Boost productivity and code quality across all major languages with each PR.

   

3. checkov

   2 60 7,495 9.9 Python

   Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

   

   1. Checkov: https://github.com/bridgecrewio/checkov Checkov is a static code analysis tool that helps developers prevent cloud misconfigurations during the development phase by scanning Terraform, CloudFormation, Kubernetes, and more.

4. terrascan

   3 24 4,900 5.6 Go

   Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

   

   2. Terrascan: https://github.com/tenable/terrascan Terrascan detects security vulnerabilities and compliance violations across your IaC. Supports multiple cloud providers, ensuring that your infrastructure complies with security best practices.

5. tfsec

   4 34 6,805 5.1 Go

   Tfsec is now part of Trivy

   

   3. tfsec: https://github.com/aquasecurity/tfsec tfsec uses a suite of security checks to scan your Terraform templates, helping to identify potential security issues before infrastructure is deployed.

6. gitleaks

   5 41 19,544 9.4 Go

   Find secrets with Gitleaks 🔑

   

   1. Gitleaks: https://github.com/gitleaks/gitleaks Gitleaks provides a way for developers to find and prevent security breaches by scanning Git repositories for secrets like passwords and API keys.

7. SonarQube

   6 70 9,506 9.9 Java

   Continuous Inspection

   

   2. SonarQube: https://github.com/SonarSource/sonarqube SonarQube enhances code quality and security. It performs automatic reviews to detect bugs, vulnerabilities, and code smells in your code.

8. hadolint

   7 28 10,857 8.4 Haskell

   Dockerfile linter, validate inline bash, written in Haskell

   

   3. Hadolint: https://github.com/hadolint/hadolint Hadolint is a Dockerfile linter that helps you build best practice Docker images, reducing vulnerabilities in your container configurations.

9. InfluxDB

   influxdata.com featured

   InfluxDB high-performance time series database. Collect, organize, and act on massive volumes of high-resolution data to power real-time intelligent systems.

   

10. trivy

    8 92 25,542 9.8 Go

    Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

    

    4. Trivy: https://github.com/aquasecurity/trivy Trivy is a versatile tool that scans for vulnerabilities in your containers, and also checks for vulnerabilities in your application dependencies.

11. kube-bench

    9 27 7,373 9.1 Go

    Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

    

    2. Kubebench: https://github.com/aquasecurity/kube-bench Kubebench is an open-source tool that checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark.

12. prowler

    10 28 11,503 10.0 Python

    Prowler is an Open Cloud Security tool for AWS, Azure, GCP and Kubernetes. It helps for continuos monitoring, security assessments and audits, incident response, compliance, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more.

    

    1. Prowler: https://github.com/prowler-cloud/prowler Prowler provides security best practices assessments, audits, incident response readiness, and continuous monitoring for AWS environments.

Suggest a related project