DefSec is a collection of Infrastructure-as-Code rules.
These rules as defined in Go and Rego.
Defining DefSec rules in this central repository means they can be used from various projects, regardless of the IaC implementation. For example, DefSec is currently used by both tfsec (for Terraform) and cfsec (CloudFormation). The same logic is applied to cloud resources defined in both source formats.
There's a detailed walkthrough for creating a new check in the tfsec contributing guide.
defsec is an Aqua Security open source project.
Learn about our open source work and portfolio here.
Join the community, and talk to us about any matter in GitHub Discussion or Slack.