iac-security

What problem does it solve?

This Skill helps development and operations teams identify security misconfigurations in Infrastructure as Code before deployment, reducing risk and remediation costs.

Core Features & Use Cases

• IaC security scanning across Terraform, CloudFormation, Kubernetes manifests, Helm charts, Pulumi, and ARM templates to detect misconfigurations and policy violations.
• CI/CD integration to automatically embed security checks into pull requests and deployment pipelines.
• Policy compliance checks against CIS benchmarks, Kubernetes security policies, and provider best practices to enforce secure infrastructure.
• Use Case: When reviewing a Terraform plan, run scans to surface misconfigurations, enforce least privilege, and generate a remediation report.

Quick Start

Install and run the scanners in your environment. For example:

• Run Checkov for Terraform, Kubernetes, and CloudFormation: checkov -d . --framework terraform,kubernetes,cloudformation
• Run tfsec for Terraform: tfsec . --format json > tfsec.json
• Run kubesec for Kubernetes manifests: kubesec scan deployment.yaml
• Integrate into CI/CD using a simple pipeline that triggers on pull requests