github.comrepoTerraform Compliance Guardrails
A GitHub repo that automates Terraform compliance checks using Checkov and Conftest as policy-as-code scanners, wired into GitHub Actions with OIDC-based AWS authentication for CI/CD. Findings are mapped to specific NIST 800-53 controls — AC-6 (least privilege), SC-7 (network segmentation), SC-13 (encryption), AU-12 (audit generation), and CM-6 (configuration settings) — giving teams an auditable trail linking IaC scan results to compliance requirements.
TL;DR Terraform IaC guardrails using Checkov/Conftest policy-as-code, enforced via OIDC-authenticated GitHub Actions and mapped to NIST 800-53 controls.
Organisations named here
- AC-6
- AU-12
- CM-6
- NIST 800-53
- SC-13
- SC-7
Technologies named here
- Terraform infrastructure
- Terraform
- Checkov
- AWS
- Conftest
- GitHub Actions
- OIDC
Related in DevSecOps
jfrog.comarticleJFrog: The Governance Gap Between Your Policy and Your Pipeline
stepsecurity.ioarticleDev Machine Guard Now Supports Windows - StepSecurity
socket.devwriteupSocket: TanStack npm Packages Compromised
securitylab.github.comadvisory