IaC
The code before deployment
GitHub and GitLab repositories analysed on every push and pull request, with a comment and a status on the pull request. For paired rules, drift between the code and what runs is reported, and a cloud finding points to its Terraform line.
- What is read
- GitHub and GitLab repositories, on every push and pull request.
- How
- Scan, comment and status on the pull request; drift between code and what is deployed for paired rules.
- In the application
- Infrastructure as code page: scan history per repository and branch, drift, link from the cloud resource to the line of code.
What it cannot see. Remote Terraform modules are not resolved. Rules without a cloud equivalent produce no drift status.
Example detections
- Bucket declared public in Terraform
- Container without resource limits in a manifest
- Unpinned base image in a Dockerfile
The other modules
Ready to see this module on your accounts?
The public demonstration runs on fictitious data. For an instance on your own accounts, request a demonstration.