PANW AppSec

All

100 repositories

yor
Public
Extensible auto-tagger for your IaC files. The ultimate way to link entities in the cloud back to the codified resource which created it.
devops cloud cloudformation
devops cloud cloudformation serverless terraform tagging iac infrastructure-as-code hacktoberfest cloudsecurity
Go
•
Apache License 2.0
•131•919•0•9•Updated Mar 12, 2026Mar 12, 2026
checkov
Public
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by …
kubernetes aws devops
kubernetes aws devops cloudformation azure terraform static-analysis gcp infrastructure-as-code scans
Python
•
Apache License 2.0
•1.3k•8.5k•92•55•Updated Mar 8, 2026Mar 8, 2026
whorf
Public
Python
•2•13•3•3•Updated Mar 8, 2026Mar 8, 2026
bridgecrew-py
Public
Shell
•0•1•0•5•Updated Mar 8, 2026Mar 8, 2026
checkov-action
Public
This GitHub Action runs Checkov against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, …
security marketplace terraform
security marketplace terraform static-analysis compliance scanning hacktoberfest devsecops bridgecrew
HCL
•
Apache License 2.0
•114•294•35•2•Updated Mar 8, 2026Mar 8, 2026
detect-secrets
Public
An enterprise friendly way of detecting and preventing secrets in code.
Python
•
Apache License 2.0
•539•8•3•10•Updated Feb 26, 2026Feb 26, 2026
code2cloud_cas_qa
Public
HCL
•28•0•0•2•Updated Nov 5, 2025Nov 5, 2025
terragoat-new-bc
Public
TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration e…
HCL
•
Apache License 2.0
•5.7k•2•0•8•Updated Aug 11, 2025Aug 11, 2025
python-hcl2
Public
Python
•
MIT License
•63•5•0•4•Updated Jul 14, 2025Jul 14, 2025
terragoat
Public
TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration e…
terraform aws-security goat
terraform aws-security goat devsecops cloud-security azure-security gcp-security
HCL
•
Apache License 2.0
•5.7k•1.3k•5•50•Updated Jul 13, 2025Jul 13, 2025
redshirts
Public
TypeScript
•
MIT License
•8•19•6•6•Updated Apr 24, 2025Apr 24, 2025
AirIAM
Public
Least privilege AWS IAM Terraformer
aws terraform iam
aws terraform iam aws-iam hacktoberfest aws-security aws-security-automation bridgecrew privileges-model
Python
•
Apache License 2.0
•81•818•11•24•Updated Mar 18, 2025Mar 18, 2025
bridgecrew-action
Public
This GitHub Action runs Bridgecrew against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfiguration…
github security marketplace
github security marketplace static-analysis actions compliance scanning devsecops github-actions bridgecrew
MIT License
•31•73•5•0•Updated Mar 18, 2025Mar 18, 2025
yor-action
Public
Github action for Yor
TypeScript
•
Apache License 2.0
•23•15•2•12•Updated Mar 17, 2025Mar 17, 2025
gha-reusable-workflows
Public
Collection of GitHub Actions reusable workflows
Apache License 2.0
•1•0•0•5•Updated Mar 5, 2025Mar 5, 2025
yor-theme
Public
HTML
•4•0•0•4•Updated Feb 26, 2025Feb 26, 2025
homebrew-tap
Public
Ruby
•4•0•1•0•Updated Feb 25, 2025Feb 25, 2025
cloudmapper
Public
CloudMapper helps you analyze your Amazon Web Services (AWS) environments.
aws aws-security
aws aws-security
JavaScript
•
BSD 3-Clause "New" or "Revised" License
•838•4•0•17•Updated Feb 2, 2025Feb 2, 2025
prisma-cloud-ide-issues
Public
This repository is the place to post issues you face while using the various IDE plugins offered by Prisma Cloud
0•0•0•0•Updated Nov 6, 2024Nov 6, 2024
prisma-cloud-vscode-plugin
Public archive
TypeScript
•
Apache License 2.0
•3•2•4•2•Updated Nov 6, 2024Nov 6, 2024
prisma-cloud-jetbrains-ide
Public archive
The Prisma cloud Plugin for Intellij enables developers to get real-time scan results, as well as inline fix suggestions as they develop cloud infrastructure.
Kotlin
•
Apache License 2.0
•0•1•1•10•Updated Nov 6, 2024Nov 6, 2024
checkov-vscode
Public archive
Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework, and other infrastructure-as-code-languages wi…
kubernetes cloudformation terraform
kubernetes cloudformation terraform static-analysis vscode serverless-framework vscode-extension hacktoberfest checkov
TypeScript
•
Apache License 2.0
•43•69•19•1•Updated Oct 27, 2024Oct 27, 2024
cfngoat
Public
Cfngoat is Bridgecrew's "Vulnerable by Design" Cloudformation repository. Cfngoat is a learning and training project that demonstrates how common configuration …
cloudformation aws-security cloudsecurity
cloudformation aws-security cloudsecurity devsecops
638•97•1•10•Updated Aug 5, 2024Aug 5, 2024
supplygoat
Public
"Vulnerable by Design" supply chain is a learning and training project that demonstrates how common configuration errors can find their way into production clou…
Ruby
•
Apache License 2.0
•281•10•0•6•Updated Aug 1, 2024Aug 1, 2024
terraformer
Public
CLI tool to generate terraform files from existing infrastructure (reverse Terraform). Infrastructure to Code
Go
•
Apache License 2.0
•1.8k•12•0•9•Updated Mar 13, 2024Mar 13, 2024
kubernetes-goattest
Public
Kubernetes Goat is "Vulnerable by Design" Kubernetes Cluster.
HTML
•
MIT License
•960•2•0•1•Updated Feb 15, 2024Feb 15, 2024
jsonpath-ng
Public
Finally, a JSONPath implementation for Python that aims to be standard compliant. That's all. Enjoy it.
Python
•
Apache License 2.0
•3•8•2•3•Updated Feb 5, 2024Feb 5, 2024
checkov-jetbrains-ide
Public archive
Checkov is a static code analysis tool for infrastructure as code.The Checkov Plugin for Intellij enables developers to get real-time scan results, as well as i…
plugin intellij intellij-plugin
plugin intellij intellij-plugin checkov
Kotlin
•
Apache License 2.0
•0•3•2•15•Updated Jan 16, 2024Jan 16, 2024
bc-toolbox
Public
Bridgecrew utility scripts and more.
JavaScript
•
ISC License
•2•2•0•2•Updated Jan 9, 2024Jan 9, 2024
cdk-validator-checkov
Public
AWS CDK policy validation plugin powered by checkov
TypeScript
•
Apache License 2.0
•2•10•0•4•Updated Dec 1, 2023Dec 1, 2023