Skip to content

Iac as code

Infrastructure As Code

The scanning capailities of Boost Security integrates into IaC models and is very useful in detecting certain vulnerabilities and exposures common to IaC tools such as Terrafoam, etc.

A scanning step can be added for example:

include:
  - remote: 'https://raw.githubusercontent.com/boostsecurityio/boostsec-scanner-gitlab/main/scanner.yml'

boost-semgrep:
  stage: build
  extends:
    - .boost_scan
  variables:
    BOOST_SCANNER_REGISTRY_MODULE: "boostsecurityio/checkov"