Keamanan Defensif

Review Eksposur Cloud & Software Supply Chain

Nilai cloud storage bucket, kebocoran secret repository, host container, dan SBOM opsional, bersama panduan cloud-posture, CIS, dan konfigurasi.

cloud-supply-chain-review7 stepcloudsupply-chainchain

Setiap step spesifik-artefak (bucket, repository, container, SBOM) bersifat opsional dan hanya berjalan jika field-nya diisi - Cloud Posture, CIS Benchmark, dan Security Config selalu berjalan menggunakan cloud provider yang dipilih sehingga workflow tetap menghasilkan laporan lengkap meski semua field opsional dikosongkan.

Rantai tools

  1. Cloud Storage Bucket Scanners3-bucket-scanner - opsional
  2. Git & Secrets Exposure Scannergit-exposure-scanner - opsional
  3. Container Security Scannerdocker-kubernetes-scanner - opsional
  4. SBOM Vulnerability Analyzersbom-analyzer - opsional
  5. Cloud Security Posture Checkercloud-posture-checker
  6. CIS Benchmark Checkercis-benchmark-checker
  7. Security Config Generatorsecurity-config-generator