gruebel

pycep

A Python based Bicep parser

checkov

Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework and other infrastructure-as-code-languages with Checkov by Bridgecrew.

aiohttp

Asynchronous HTTP client/server framework for asyncio and Python

arrow

🏹 Better dates & times for Python

aws-embedded-metrics-python

Amazon CloudWatch Embedded Metric Format Client Library

aws-sam-cli

CLI tool to build, test, debug, and deploy Serverless applications using AWS SAM

boto3

AWS SDK for Python

cfn-lint

CloudFormation Linter

changelog-test

cloudsplaining

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

cyclonedx-python-lib

Python library for generating CycloneDX SBOMs

detect-secrets

An enterprise friendly way of detecting and preventing secrets in code.

dpath-python

A python library for accessing and searching dictionaries via /slashed/paths ala xpath.

hcl-rs

HCL parsing and encoding libraries for rust with serde support

import-linter

Import Linter allows you to define and enforce rules for the internal and external imports within your Python project.

of-rust-sdk

packageurl-python

Python implementation of the package url spec

pike

Pike is a tool for determining the permissions or policy required for IAC code

pipgrip

Lightweight pip dependency resolver with deptree preview functionality based on the PubGrub algorithm

policy_sentry

IAM Least Privilege Policy Generator

pytest-mock

Thin-wrapper around the mock package for easier use with pytest

python-hcl2

python-sdk

Python SDK for OpenFeature

python-sdk-contrib

Community contributions for hooks and reference providers in python

setup-rust-toolchain

Setup a specific Rust toolchain with extra features like problem matchers

tenacity

Retrying library for Python

terragoat

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

tree-sitter-typescript

TypeScript grammar for tree-sitter

typeshed

Collection of library stubs for Python, with static types

yor

Extensible auto-tagger for your IaC files. The ultimate way to link entities in the cloud back to the codified resource which created it.