skills.rest
devkeni
devkeniCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

iac-security

Scan Infrastructure as Code for security misconfigurations using Checkov, tfsec, and Trivy.

1|Updated Mar 27, 2026
Search Tags:#security#compliance#kubernetes#terraform#iac#infrastructure-as-code
One-click install
npx skills add https://github.com/devkeni/Skills --skill iac-security-devkeni
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: iac-security
Source: https://github.com/devkeni/Skills/tree/main/security/ai-security-arsenal/skills/iac-security
Command: npx skills add https://github.com/devkeni/Skills --skill iac-security-devkeni

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Infrastructure as Code security scanning across Terraform, CloudFormation, Kubernetes manifests, Helm charts, Pulumi, and ARM templates to identify misconfigurations before they reach production.

Core Features & Use Cases

  • Comprehensive IaC scanning with Checkov, tfsec, Terrascan, KICS, kubesec, Trivy, and OPA/Conftest.
  • Supports Terraform, CloudFormation, Kubernetes, Helm, ARM, and Pulumi configurations across multi-cloud environments.
  • Use cases include CI/CD integration, pre-deploy audits, and policy compliance checks.

Quick Start

Run a security scan on your Terraform, CloudFormation, Kubernetes, Helm, Pulumi, and ARM configurations using the integrated IaC scanners.

Frequently Asked Questions about iac-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Terraform and Kubernetes manifests for security misconfigurations?▼

IaC security scanning detects misconfigurations in Terraform and Kubernetes manifests using tools like Checkov, tfsec, and kubesec. It applies policy validations across multi-cloud environments to catch vulnerabilities before production deployment.

What is the best way to automate infrastructure-as-code security checks in a CI/CD pipeline?▼

Automating IaC security checks in CI/CD pipelines involves running scanners like Checkov, Terrascan, and Trivy against your configurations. This integration enables pre-deployment audits and continuous policy compliance validation across your infrastructure code.

Does this IaC security scanning approach support Helm charts and ARM templates?▼

IaC security scanning supports Helm charts and ARM templates alongside Terraform, CloudFormation, Kubernetes, and Pulumi configurations. This multi-format coverage ensures comprehensive auditing across diverse multi-cloud infrastructure environments.

When do I need to use OPA and Conftest for infrastructure-as-code auditing?▼

OPA and Conftest are needed for IaC auditing when you require custom policy validations and compliance checks across your infrastructure code. They complement scanners like KICS and Trivy to enforce specific security rules before deployment.

Can I use multiple IaC scanners like tfsec and Checkov together for pre-deployment checks?▼

Using multiple IaC scanners like tfsec and Checkov together provides deeper coverage for pre-deployment checks. Combining these tools with Terrascan and KICS identifies a broader range of misconfigurations across your multi-cloud infrastructure templates.

Related Skills

Explore More Software Engineering Skills→
hardw00thardw00t
90

iac-security

Scan Infrastructure as Code configurations for misconfigurations and policy violations.

Community
Advanced
nicolasmosquerarnicolasmosquerar
1

Policy as Code

Enforce infrastructure policies on Terraform and CDK workflows in CI/CD pipelines.

Community
Advanced
devendrapratapsinghdevendrapratapsingh
1

platform-security

Audit container images, Kubernetes configurations, cloud environments, and infrastructure as code for security vulnerabilities.

Community
Advanced
ddarkrddarkr
5

oma-tf-infra

Automate multi-cloud Terraform infrastructure design, review, and management.

Community
Advanced