Open Source

Project	Description	Related projects	Language	License
Checkov	Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework and other infrastructure-as-code-languages with Checkov by Bridgecrew.	GitHub Action VSCODE Extension	Python	Apache License 2.0
Yor	Extensible auto-tagger for your IaC files. The ultimate way to link entities in the cloud back to the codified resource which created it.	GitHub Action	Go	Apache License 2.0
AirIAM	Least privilege AWS IAM Terraformer.		Python	Apache License 2.0
TerraGoat	TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.		HCL	Apache License 2.0
CFNGoat	Cfngoat is Bridgecrew's "Vulnerable by Design" Cloudformation repository. Cfngoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.		YAML	Apache License 2.0
CDKGoat	CdkGoat is Bridgecrew's "Vulnerable by Design" AWS CDK repository. CdkGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.		Python	Apache License 2.0
Helm Scanner	Open source IaC security scanner for public Helm charts.		Python	Apache License 2.0
BicepGoat	"Vulnerable by Design" Bicep repository.		Bicep	Apache License 2.0
KustomizeGoat	"Vulnerable by Design" Kustomize repository.		Dockerfile	Apache License 2.0
SupplyGoat	"Vulnerable by Design" Supply Chain repository.		Ruby, HCL	Apache License 2.0