Cloud Security Benchmarks

Benchmark DevSecOps tools against vulnerable cloud/IaC target resources.

Monorepo

• core - collection of packages that is organized by the types of DevSecOps tools they contain (i.e.: IaC scanners, DAST, IAM scanners etc.).

Targets

• terragoat: git submodule pointing to Terragoat - a collection of vulnerable Terraform configurations
• kubernetes-goat: git submodule pointing to kubernetes-goat - a collection of vulnerable Kubernetes clusters