An open source, cloud-native security to protect everything from build to runtime
open source, cloud-native, graph-based query language
A modern, extensible framework for defining and enforcing security policies across your digital infrastructure.
Deepfence Runtime API & code samples
OSCAL tools for AI agents
Hardened Windows Server image
Security Scanning Samples with cnspec, cnquery, and Mondoo Platform
A security-as-code tool for making a difference in cybersecurity
DeepLint is a Security-as-Code framework for securing and optimizing cloud environments.
Ansible Role for Mondoo cnquery and cnspec
Production-grade Terraform module that provisions a Docker Swarm cluster on AWS — secure bootstrap via SSM (no SSH provisioners), remote state with S3/DynamoDB, dev/staging/prod environments, and a full CI pipeline (checkov, tflint, gitleaks).
Security skill collection for Claude Code and Codex — SAST, DAST, binary analysis, architecture review, code clustering, and assessment-as-code workflows
Security policy as code for any API gateway. One policy per route (an OpenAPI extension), compiled by a deterministic CLI to Kong, Coraza, BunkerWeb, Cloudflare & more. Versions in git, drift fails CI. Apache-2.0.
Cloud - K8s Security & Compliance Automation Jobs
A comprehensive DevSecOps platform demonstrating Security-as-Code with a hardened CI/CD pipeline, automated security gates (SAST, SCA, Secrets), and blue-green deployments.
An AI powered IAM agent that uses GitHub Copilot CLI to generate, validate (via Boto3), and report on least privilege AWS policies.
Development, Security, and Operations methodology that integrates security practices within the DevOps process, emphasizing security automation and collaboration throughout the software development lifecycle.
Design and implementation of two hierarchical architectures (Child-Push and Root-Pull) for the ODA service. Security-as-Code methodology leveraging Ansible and Kafka with mTLS, ACLs, quotas, and drift reconciliation.
Scan codebases for security flaws with LLM agent skills that turn Claude Code, Cursor, and other assistants into SAST scanners
Add a description, image, and links to the security-as-code topic page so that developers can more easily learn about it.
To associate your repository with the security-as-code topic, visit your repo's landing page and select "manage topics."