PANW AppSec

checkov

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

terragoat

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

yor

Extensible auto-tagger for your IaC files. The ultimate way to link entities in the cloud back to the codified resource which created it.

AirIAM

Least privilege AWS IAM Terraformer

checkov-action

This GitHub Action runs Checkov against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.

cfngoat

Cfngoat is Bridgecrew's "Vulnerable by Design" Cloudformation repository. Cfngoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

bridgecrew-action

This GitHub Action runs Bridgecrew against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.

checkov-vscode

Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework, and other infrastructure-as-code-languages with Checkov by Bridgecrew in your VSCODE IDE.

terraform-aws-session-manager

Terraform module for deploying AWS Session Manager

yor-action

Github action for Yor

terraformer

CLI tool to generate terraform files from existing infrastructure (reverse Terraform). Infrastructure to Code

whorf

supplygoat

"Vulnerable by Design" supply chain is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

cdk-validator-checkov

AWS CDK policy validation plugin powered by checkov

jsonpath-ng

Finally, a JSONPath implementation for Python that aims to be standard compliant. That's all. Enjoy it.

detect-secrets

An enterprise friendly way of detecting and preventing secrets in code.

python-hcl2

checkov-jetbrains-ide

Checkov is a static code analysis tool for infrastructure as code.The Checkov Plugin for Intellij enables developers to get real-time scan results, as well as inline fix suggestions as they develop cloud infrastructure.

bc-toolbox

Bridgecrew utility scripts and more.

prisma-cloud-vscode-plugin

bridgecrew-py

kubernetes-goattest

Kubernetes Goat is "Vulnerable by Design" Kubernetes Cluster.

prisma-cloud-jetbrains-ide

The Prisma cloud Plugin for Intellij enables developers to get real-time scan results, as well as inline fix suggestions as they develop cloud infrastructure.

checkov-theme

checkov-theme-2

gha-reusable-workflows

Collection of GitHub Actions reusable workflows

homebrew-tap

prisma-cloud-ide-issues

This repository is the place to post issues you face while using the various IDE plugins offered by Prisma Cloud

react-diff-viewer

A simple and beautiful text diff viewer component made with Diff and React.

terragoat-new-bc

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.