#infrastructure-as-code

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

The AWS Cloud Development Kit is a framework for defining cloud infrastructure in code

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

The Cloud Native Control Plane

Terraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.

Event Driven Orchestration & Scheduling Platform for Mission Critical Applications

Pulumi - Infrastructure as Code in any programming language 🚀

Terraform provider for MinIO and S3-compatible storage (R2, B2, Hetzner, Spaces) — buckets, IAM, replication, lifecycle, encryption & more.

The infrastructure platform for the intelligence era

Infrastructure as code for DNS!

AWS CDK Toolkit

An Amazon Web Services (AWS) Pulumi resource package, providing multi-language access to AWS

Defang Deploy CLI. Develop Once, Deploy Anywhere. Take your app from Docker Compose to a secure and scalable deployment on your favorite cloud in minutes.

Manage Infrastructure as Code with less pain.

Deterministic, local-first memory and guardrails for AI coding agents with no LLM in the hot path.

CDK Construct that syncs your sops secrets into AWS SecretsManager secrets.

Terraform provider to manage JFrog Artifactory

🌯 Burrito is a TACoS Kubernetes Operator - "Argo CD for Terraform"

A Microsoft Azure Pulumi resource package, providing multi-language access to Azure

Cross-platform developer workstation control plane powered by chezmoi — adaptive terminal themes, AI CLI workflows, read-only MCP, WASM attestations, encrypted secrets, and SLSA-verified releases.