Defensive Security

Cloud & Software Supply-Chain Exposure Review

Assess a cloud storage bucket, a repository's exposed secrets, a container host, and an optional SBOM, alongside cloud-posture, CIS, and config guidance.

cloud-supply-chain-review7 stepscloudsupply-chainchain

Every artifact-specific step (bucket, repository, container, SBOM) is optional and only runs when its own field is filled in - Cloud Posture, CIS Benchmark, and Security Config always run using the selected cloud provider so the workflow still produces a full report even with every optional field left blank.

Tool chain

  1. Cloud Storage Bucket Scanners3-bucket-scanner - optional
  2. Git & Secrets Exposure Scannergit-exposure-scanner - optional
  3. Container Security Scannerdocker-kubernetes-scanner - optional
  4. SBOM Vulnerability Analyzersbom-analyzer - optional
  5. Cloud Security Posture Checkercloud-posture-checker
  6. CIS Benchmark Checkercis-benchmark-checker
  7. Security Config Generatorsecurity-config-generator