Jenkins CI (dynamic K8s agents) → signed, SBOM'd supply chain (Syft + Cosign/Sigstore) → enforced at admission by Kyverno, watched at runtime by Falco, backed up by Velero. Local-first on kind.
KubeDock Security Scan is an Azure DevOps Extensions for CI/CD pipeline that helps to scan and provide feedback for vulnerability in kubernetes manifest and dockerfile via Checkov
Secure static website hosting on AWS using Terraform with S3, CloudFront, Route53, and SSL.
Terraform module to create Sql managed instance resources . Azure SQL Managed Instance is a Platform-as-a-Service (PaaS) offering that provides near 100% compatibility with the SQL Server Enterprise Edition, designed for easy "lift-and-shift" migration of on-premises SQL Server apps to the cloud with minimal changes.
Deploy a Node.js to-do application to AWS Elastic Beanstalk using Terraform for infrastructure provisioning, GitHub Actions for CI/CD automation, with integrated cost estimation via Infracost and security scanning through Checkov.
🏗️ A centralized repository for reusable custom Checkov policies, metadata-driven service-to-scan mappings, Terraform module detection logic, pass/fail test cases, and GitHub Actions automation. It enables consistent, scalable, and organization-wide IaC governance across Terraform repositories and cloud services.
To associate your repository with the checkov-scan topic, visit your repo's landing page and select "manage topics."