๐๏ธ ๐ Checkov
Checkov is a static code analysis tool for infrastructure-as-code. Checkout the project documentation at https://www.checkov.io
๐๏ธ ๐ Kics.io
KICS stands for keeping infrastructure as code secure, it is an open source solution for static code analysis of Infrastructure as Code. Checkout the project documentation at https://kics.io
๐๏ธ ๐ Kubescape
Kubescape is a K8s open-source tool providing a multi-cloud K8s single pane of glass, including risk analysis, security compliance, RBAC visualizer and image vulnerabilities scanning. Checkout the project documentation at https://github.com/armosec/kubescape