tool · inferred from evidence
checkov
A static analysis tool for infrastructure-as-code (IaC) to detect security misconfigurations.
- How to fix checkov failed item by its rules?
You shouldn't use the wild card with resources, Right now it's opened widely for all the resources.