Event banner
Event details
Anyone have a list of great opensource tools they are using for their pipelines?
static code analysis for IaC
https://github.com/bridgecrewio/checkov
static code analysis for Github Actions
https://github.com/rhysd/actionlint
kitchen sink
https://github.com/oxsecurity/megalinter
- bmoore-msft
Microsoft
ARM Template Toolkit:
ARM Template Analyzer
https://github.com/Azure/template-analyzer - more security focused - this is still in a "preview" state.- Perfection. Thank you Brian.
FYI, checkov, actionlint and arm-ttk and embedded within MegaLinter and regularely upgraded to their latest version 🙂 About template analyzer, once it's not in "preview" anymore we could embed it too 🙂
Since recent version, it is also possible to have MegaLinter results as a comment in the PR
https://oxsecurity.github.io/megalinter/latest/reporters/AzureCommentReporter/
