Skip to content

Feature/lab6#567

Open
nikolashinamary wants to merge 2 commits intoinno-devops-labs:mainfrom
nikolashinamary:feature/lab6
Open

Feature/lab6#567
nikolashinamary wants to merge 2 commits intoinno-devops-labs:mainfrom
nikolashinamary:feature/lab6

Conversation

@nikolashinamary
Copy link

@nikolashinamary nikolashinamary commented Mar 15, 2026

Lab 6 Submission

Goal

Complete Lab 6 by scanning vulnerable Terraform, Pulumi, and Ansible IaC with tfsec, Checkov, Terrascan, and KICS, then document the findings, comparison, remediation, and CI/CD recommendations.

Changes

  • Added labs/submission6.md with Task 1-3 analysis.
  • Added required scan artifacts under labs/lab6/analysis/.
  • Documented tool comparison, vulnerability categories, top findings, remediation examples, and pipeline
    strategy.

Testing

  • Ran tfsec against Terraform.
  • Ran Checkov against Terraform.
  • Ran Terrascan against Terraform.
  • Ran KICS against Pulumi and Ansible.
  • Verified reports were generated in labs/lab6/analysis/.

Artifacts & Screenshots

  • labs/submission6.md
  • labs/lab6/analysis/tfsec-results.json
  • labs/lab6/analysis/checkov-terraform-results.json
  • labs/lab6/analysis/terrascan-results.json
  • labs/lab6/analysis/kics-pulumi-results.json
  • labs/lab6/analysis/kics-ansible-results.json

Checklist

  • Clear title provided
  • Documentation updated if needed
  • No secrets or large temporary files included
  • Task 1 done — Terraform & Pulumi scanning with multiple tools
  • Task 2 done — Ansible security analysis
  • Task 3 done — Comparative tool analysis and security insights

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant