Cloud Security Test for CI/CD
Description
Cloud Security Test can be seamlessly integrated into your CI/CD pipeline to automatically check unprotected or misconfigured cloud storage. You can use a Docker image or a Python script as described below.
Installing Python Script
Create virtual environment and install dependencies. Python >= 3.7 required.
git clone "https://github.com/immuniweb/iwtools.git" && cd iwtools/iwtools
python3 -m venv env
source ./env/bin/activate
pip install -r requirements.txt
python3 -m venv env
source ./env/bin/activate
pip install -r requirements.txt
Usage
Check your unprotected or misconfigured cloud storage hosted by cloud service providers:
Start a new test with quick scan or get the results from cache:
./iwtools.py cloud example.com
Get raw API response in JSON format:
./iwtools.py cloud --format raw_json example.com
Force to refresh the test with quick scan using an API key
./iwtools.py cloud --api-key ABCDE-12345-FGHIJ-67890 --refresh example.com
Force to refresh the test with full scan using an API key
./iwtools.py cloud --api-key ABCDE-12345-FGHIJ-67890 --refresh --quick false example.com
Start a new test with quick scan or get the results from cache using iwtools/Docker:
docker run immuniweb/iwtools cloud example.com
Check other command line options here.