ツール

All-in-one security scanner for container images, filesystems, Git repos and Kubernetes clusters: finds known vulnerabilities, IaC misconfigurations, leaked secrets and software licenses, and generates SBOMs. Open source, maintained by Aqua Security.

Define cloud infrastructure in general-purpose languages like TypeScript, Python and Go, then preview and deploy with pulumi up to AWS, Azure, GCP, Kubernetes and 300+ other providers. Open source and maintained by Pulumi.

Microsoft's official Azure skill set: deployment prep and validation, deployment, production diagnostics, AKS, quota lookup, compliance audits, cloud migration and Foundry; the plugin version also connects the Azure MCP Server. Needs an Azure account and az login.