iac-security
Security-focused linter for Docker Compose files. Catches dangerous misconfigurations before they reach production. Grounded in OWASP and CIS Docker Benchmark.
Static IaC threat modeler using STRIDE, MITRE, and PASTA