Checkov

Description

Static-analysis scanner for infrastructure-as-code that takes Terraform, CloudFormation, Kubernetes or similar files and checks them against hundreds of policies, reporting misconfigurations such as public buckets or open security groups, used to audit a target's published infrastructure definitions.