Vulnerabilities vs. Security Misconfigurations: An Essential Primer
Misconfigurations are flaws in the way the software environment is configured, whereas security vulnerabilities are flaws in the software itself.
9 essential infrastructure security considerations for Kubernetes
Kubernetes is the go-to platform for managing containerized applications. Learn the best security practices through Kubernetes' layers and components here.
How to prevent the IaC misconfiguration snowball effect
Without the right tooling, one IaC misconfiguration can snowball into thousands of security alerts. Proactive, embedded IaC security can help.
Bridgecrew configuration as code using our new Terraform Provider
Terraform is one of the most popular infrastructure as code (IaC) tools used to deploy,…
5 common Kubernetes misconfigs and how to fix them
Kubernetes is a powerful tool with enough settings to deploy a performant, scalable, and reliable…
5 infrastructure security tasks your developers can automate
Back-end and infrastructure-related software developers can automate these security tasks to produce secure, quality code.
It’s not all bad! Using cloud drift for teachable moments
Drift between running cloud resources and their associated infrastructure as code (IaC) will inevitably happen. Learn how to use drift as a learning opportunity and provide training on how to prevent it in the future.
Drift detection tools: Terraform vs CloudFormation vs Bridgecrew
Drift occurs when changes are made directly to a resource in a cloud provider. Learn how CloudFormation, Terraform, and Bridgecrew handle drift detection.
Tutorial: Incorporate IaC Security in your CI/CD pipeline with Bridgecrew, Jenkins, and GitHub
Learn how to add security into your Jenkins CI/CD to ensure only secure IaC code is committed to a repository and deployed.
Happy Hacktoberfest 2021!
Learn about Bridgecrew's contribution to Hacktoberfest 2021. We're getting our open-source community involved and giving away some cool prizes.
Advanced Terraform security: Pro tips for secure infrastructure as code
Learn advanced tips about securing Terraform, such as security scanning at each step of the DevOps lifecycle, keeping IAM sprawl under control, and more.
Supercharge GitHub with IaC security pull request comments and fix suggestions
Bridgecrew has been updated to automatically comment on misconfigurations for resources, and includes richer context and fix suggestions.