checkov

github.com ↗

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages.