Security & Code Analysis
A list for SCA and more:
| Name | OSS | Comment |
|---|---|---|
| Kics | 👍 | Static code analysis of Infrastructure as Code |
| Checkov | 👍 | Find cloud misconfigurations before they're deployed |
| Terrascan | 👍 | Detect compliance and security violations across Infrastructure as Code |
| Snyk | Find and automatically fix vulnerabilities in software and infrastructure code | |
| SonarCube | Code quality and security solution for consistent and reliable clean code. |