Security Tools Cmds

CLI invocations for the scanners run against this codebase and connected cloud accounts.

The tools

secrets Betterleaks

Secret scanning over a directory, SARIF output.

IaC Checkov

IaC scan over a directory, all frameworks, JSON output.

IAM · multi-cloud Cloudsplaining

IAM risk scan across AWS, Azure, GCP, and OCI — setup and scan commands per provider.

CSPM Cloudsploit

Config-driven scan, JSON output.

identity-access · multi-cloud Prowler

Identity-access category scan across AWS, Azure, GCP, and OCI, OCSF JSON output.