A curated list of awesome open source workflow engines

pypyr task-runner cli & api for automation pipelines. Automate anything by combining commands, different scripts in different languages & applications into one pipeline process.

Least privilege AWS IAM Terraformer

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

Extensible auto-tagger for your IaC files. The ultimate way to link entities in the cloud back to the codified resource which created it.

The ConsoleMe CLI utility

A Central Control Plane for AWS Permissions and Access

Open-source cloud-environment inspector. Supporting AWS, GCP, Azure, and more! Your cloud resources will have nowhere to hide!

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

Data pipelines for cloud config and security data. Build cloud asset inventory, CSPM, FinOps, and vulnerability management solutions. Extract from AWS, Azure, GCP, and 70+ cloud and SaaS sources.

PacBot (Policy as Code Bot)

Run individual controls or full compliance benchmarks for CIS, PCI, NIST, HIPAA and more across all of your AWS accounts using Steampipe.

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.

An open source, general-purpose policy engine.

Terraform Provider for Fugue

Regula checks infrastructure as code templates (Terraform, CloudFormation, k8s manifests) for AWS, Azure, Google Cloud, and Kubernetes security and compliance using Open Policy Agent/Rego

Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

Open source incident management and response platform.

🔥 Incident management tool

Terraform module for creating a Jenkins Task in AWS ECS

post mortem tracker

Kubernetes Native Edge Computing Framework (project under CNCF)

Compile-time Dependency Injection for Go

CapitalOne DevOps Dashboard

Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

A library for generating completely customizable code from the Open API Specification (FKA Swagger) RESTful API documentation using the scripting power of Node.js.

A shell script mocking utility/framework for the BASH shell