You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently there is no built-in capability to run a fan-out, parallel scan all of the terraform in a supported VCS. For instance, a company may have 5,000 repositories in GitLab, and 1,200 of them contain terraform. We should support a way to clone a provided list of repositories in parallel (potentially in multiple runtimes environments, like separate lambdas or EC2 instances), scan the repositories for matching file extensions, run the appropriate security tools against the correct folders in that repository, and centralize the results.
Out of scope is the discovery/enumeration logic of which repositories exist; that should be handled by other projects.
The text was updated successfully, but these errors were encountered:
Summary of the feature
Currently there is no built-in capability to run a fan-out, parallel scan all of the terraform in a supported VCS. For instance, a company may have 5,000 repositories in GitLab, and 1,200 of them contain terraform. We should support a way to clone a provided list of repositories in parallel (potentially in multiple runtimes environments, like separate lambdas or EC2 instances), scan the repositories for matching file extensions, run the appropriate security tools against the correct folders in that repository, and centralize the results.
Out of scope is the discovery/enumeration logic of which repositories exist; that should be handled by other projects.
The text was updated successfully, but these errors were encountered: