diff --git a/Dockerfile b/Dockerfile index 6778ba7..db4ace9 100644 --- a/Dockerfile +++ b/Dockerfile @@ -127,6 +127,15 @@ RUN pipx install semgrep # Install nodejsscan RUN pipx install nodejsscan +# Install principalmapper +RUN pipx install principalmapper + +# Install checkov +RUN pipx install checkov + +# Install scoutsuite +RUN pipx install scoutsuite + # pipx environment path set RUN pipx ensurepath @@ -224,4 +233,4 @@ RUN echo '\ncat /etc/motd\n' >> ~/.zshrc # Set working directory WORKDIR /home/${USERNAME} -CMD ["/bin/zsh"] +CMD ["/bin/zsh"] \ No newline at end of file diff --git a/README.md b/README.md index 2fe6b14..dd5d2a3 100644 --- a/README.md +++ b/README.md @@ -61,9 +61,9 @@ Examples: - [ ] Container and/or cloud specific: - [ ] kube-bench: Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark. (https://github.com/aquasecurity/kube-bench) - - [ ] checkov: Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages. (https://github.com/bridgecrewio/checkov) + - [x] checkov: Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages. (https://github.com/bridgecrewio/checkov) - [ ] scoutsuite: Multi-Cloud Security Auditing Tool. (https://github.com/nccgroup/ScoutSuite) - - [ ] pmapper: A tool for quickly evaluating IAM permissions in AWS. (https://github.com/nccgroup/PMapper) + - [x] pmapper: A tool for quickly evaluating IAM permissions in AWS. (https://github.com/nccgroup/PMapper) - [x] hadolint: Dockerfile linter. (https://github.com/hadolint/hadolint) - [x] Dependency & lib checkers: