Detect and fix security issues in Terraform, Kustomize, Helm, and Kubernetes manifests.
npx skills add https://github.com/DiegoBulhoes/claude --skill iac-review
Please help me install this Agent Skill. Skill: iac-review Source: https://github.com/DiegoBulhoes/claude/tree/main/skills/iac/iac-review Command: npx skills add https://github.com/DiegoBulhoes/claude --skill iac-review
Infrastructure-as-Code review and security auditing for Terraform, Kustomize, Helm charts, and Kubernetes manifests to catch misconfigurations and enforce best practices.
Run an IaC review on the modified Terraform, Kustomize, Helm, and Kubernetes files to generate a prioritized report.
High-intent search queries and answers about installing and using this skill.
IaC review automates security auditing for Terraform, Kustomize, Helm charts, and Kubernetes manifests to catch misconfigurations and enforce best practices across CI/CD pipelines and repository audits.
Infrastructure-as-code review validates changed files against security, correctness, and style rules, then generates a prioritized vulnerability report with severity ratings to guide remediation directly within PR reviews.
Yes, after analyzing configurations and generating a structured report, the workflow proposes or applies automated fixes with user approval to remediate identified security and correctness issues.
Yes, the IaC security audit supports both Terraform and Kubernetes configurations, specifically scanning Kustomize, Helm charts, and native Kubernetes manifests across CI/CD pipelines and repository audits.
An infrastructure-as-code review prioritizes vulnerabilities by applying severity scoring during the report phase, generating an actionable report that ranks misconfigurations to guide remediation efforts effectively.
CatsofsufferingGuide engineers in designing Kubernetes, Helm, Kustomize, and GitOps infrastructure.
duynhneOptimize and secure CI/CD pipelines, containers, Kubernetes, and infrastructure as code.
bomberoxenviosdosruedasAutomate DevOps workflows with Terraform, GitHub Actions, Kubernetes, and Prometheus.
devendrapratapsinghAudit container images, Kubernetes configurations, cloud environments, and infrastructure as code for security vulnerabilities.
