PANW AppSec

Secure cloud native applications and infrastructure

PinnedLoading

checkovcheckovPublic
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Python 7.4k 1.2k
yoryorPublic
Extensible auto-tagger for your IaC files. The ultimate way to link entities in the cloud back to the codified resource which created it.
Go 867 123
terragoatterragoatPublic
TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into product…
HCL 1.2k 5.4k
AirIAMAirIAMPublic
Least privilege AWS IAM Terraformer
Python 786 79
bridgecrew-actionbridgecrew-actionPublic
This GitHub Action runs Bridgecrew against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compl…
74 29
bridgecrew-orbbridgecrew-orbPublic
This CircleCI Orb Action runs Bridgecrew analysis of Infrastructure-as-Code repository. Bridgecrerw performs static security analysis of Terraform, CloudFormation and Kubernetes Infrastructure code…
11 4

Repositories

Showing 10 of 99 repositories

whorf Public
bridgecrewio/whorf’s past year of commit activity
Python 11 2 3 3 UpdatedMar 26, 2025
checkov-action Public
This GitHub Action runs Checkov against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.
bridgecrewio/checkov-action’s past year of commit activity
HCL 262Apache-2.0 105 32 (1 issue needs help) 2 UpdatedMar 26, 2025
bridgecrew-py Public
bridgecrewio/bridgecrew-py’s past year of commit activity
Shell 10 1 5 UpdatedMar 26, 2025
checkov Public
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
bridgecrewio/checkov’s past year of commit activity
Python 7,446Apache-2.0 1,174 103 (1 issue needs help) 62 UpdatedMar 26, 2025
yor Public
Extensible auto-tagger for your IaC files. The ultimate way to link entities in the cloud back to the codified resource which created it.
bridgecrewio/yor’s past year of commit activity
Go 867Apache-2.0 123 1 7 UpdatedMar 25, 2025
detect-secrets Public Forked fromYelp/detect-secrets
An enterprise friendly way of detecting and preventing secrets in code.
bridgecrewio/detect-secrets’s past year of commit activity
Python 5Apache-2.0 506 1 11 UpdatedMar 20, 2025
AirIAM Public
Least privilege AWS IAM Terraformer
bridgecrewio/AirIAM’s past year of commit activity
Python 786Apache-2.0 79 11 (2 issues need help) 23 UpdatedMar 18, 2025
bridgecrew-action Public
This GitHub Action runs Bridgecrew against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.
bridgecrewio/bridgecrew-action’s past year of commit activity
74MIT 29 5 0 UpdatedMar 18, 2025
redshirts Public
bridgecrewio/redshirts’s past year of commit activity
TypeScript 21MIT 7 6 7 UpdatedMar 17, 2025
yor-action Public
Github action for Yor
bridgecrewio/yor-action’s past year of commit activity
TypeScript 16Apache-2.0 20 0 10 UpdatedMar 17, 2025