Infrastructure as Code

The Infrastructure as Code (iac) component focuses on analyzing your infrastructure code for security vulnerabilities. This component helps in identifying misconfigurations and security risks in your infrastructure setup, ensuring that your cloud resources are configured securely before deployment.

The iac accept a following inputs:

Name	Description	Required	Default Value
`api_url`	The DevGuard API URL	No	`https://api.main.devguard.org`
`asset_name`	Name of the asset to scan	Yes
`token`	API token for authenticating with DevGuard	Yes
`scan_stage`	The stage where the scan is run	No	`test`
`runner_tags`	The runner tags used to select appropriate CI runners.	No	`""`

Usage Example: Here’s an example of how to call this component:

include:
- remote: "https://gitlab.com/l3montree/devguard/-/raw/main/templates/infrastructure-as-code-scanning.yml"
  inputs:
    asset_name: "myOrgnaization/projects/myProject/assets/myAsset"
    token: "$DEVGUARD_TOKEN"

Static Application Security Testing Software Composition Analysis