Console’s review
· Reviewed by David Mytton
What we like
Scans infrastructure as code configs e.g. Terraform, CloudFormation, k8s, Helm, Dockerfile for misconfigurations. Large out of the box library. Can integrate with IDE and CI to help catch issues ideally as you write them, but definitely before they go to prod.
Tradeoffs
Conflicts with TFSec if you’re using Terraform, so best not to use them combined - pick one or the other.