easy5 pts · first answer countsdevsecopsinfrastructure-as-code

What IaC scanning catches

A Terraform PR adds a security group allowing 0.0.0.0/0 on port 22. Which pipeline check is designed to flag this before it is applied?

A.A unit test suite for the application codeB.A DAST scan of the live production websiteC.An IaC scanner such as Checkov, tfsec or Trivy configD.A vulnerability scan of the container image

Discussion 0

Join free to post in the discussion.

What IaC scanning catches

Discussion 0

Related questions