Hacktoberfest contribution spotlight: Securing software delivery pipelines using Checkov JSON scanning
Hacktoberfest contribution from Brent Souze allows you to inspect JSON configurations using Checkov, including CI/CD configurations
Tutorial: Incorporate IaC Security in your CI/CD pipeline with Bridgecrew, Jenkins, and GitHub
Learn how to add security into your Jenkins CI/CD to ensure only secure IaC code is committed to a repository and deployed.
Creating a secure Kubernetes NGINX deployment using Checkov
Even the most popular web server deployment has insecure defaults. Here, we identify misconfigurations in default K8s NGINX deployments.
Integrating Yor with AWS IAM for better access control
Use Yor to automate the process of adding team ownership and environment tags to IaC and enforce AWS IAM policies using tagged resources.
Automate AWS Config compliance fixes with Yor + Slack
Automate AWS Config compliance fixes for infrastructure as code misconfigurations using Yor and Slack notifications.
Prioritize new misconfigurations with Checkov’s baseline feature
Prioritize only new infrastructure as code misconfigurations with open-source tool Checkov's baseline feature.
Simplify cost allocation using Yor automated tagging with AWS Cost Explorer
Open source tool Yor can automate cost allocation tags alongside AWS Cost Explorer to narrow down costs per team, project, or environment.
Best practices for AWS tagging with Yor
Open source tool Yor automatically add consistent, helpful tags to infrastructure-as-code (IaC) templates in AWS and other frameworks.
Checkov Secrets Scanning: Find exposed credentials in IaC
Learn how Checkov's Secrets Scanning feature helps look for exposed credentials in IaC templates before a damaging leak occurs.
Using Yor and Checkov to authorize IaC modifiers from CI/CD
Authorize who can modify an IaC resource straight from your CI/CD pipeline using auto-tagging with Yor and policy-as-code with Checkov.
Automate infrastructure tagging with Yor and GitLab CI
Yor is fully extensible and supports any CI pipeline you need, including GitLab CI, to enable a host of “code to cloud” tracking and auditing.
A deep dive into code to cloud tracing with Yor
With Yor, you can trace a misconfigured cloud resource back to code and pinpoint the ideal fix location in git.