Terraform plan analysis with Checkov and Bridgecrew
Learn how to leverage Checkov and Bridgecrew to scan both raw Terraform files and Terraform plan output for security and compliance errors.
How to get ephemeral access keys to an AWS account using MFA
Programmatic access makes it easier to automate tasks, but at the price of increased risk. Learn how to overcome these risks with AWS best practices on access keys management.
Bridgecrew brings IaC security to GitHub with a code scanning integration
We’re proud to bring IaC security scanning to GitHub with our new GitHub code scanning integration.
Why investing in IaC security should be top of mind for DevOps and security teams
By investing in IaC security, DevOps and security teams leverage the scalability and predictability of IaC to maintain a strong cloud security posture.
Kubernetes static code analysis with Checkov
Use Checkov, Bridgecrew's OSS infrastructure as code analysis tool, to scan Kubernetes manifests and identify security issues in Kubernetes workloads.
Introducing TerraGoat, a “vulnerable-by-design” Terraform training project
Learn how to identify errors in infrastructure-as-code templates with Bridgecrew's new Terraform security training project TerraGoat.
Announcing Checkov: Prevent cloud misconfigurations during build-time
Keep your cloud intrastructure secure with Checkov, Bridgecrew's new open-source tool for infrastructure as code static analysis.