Lab6 submission: Basanov Maxim

[scruffyscarf]

Goal

Perform security analysis on vulnerable Infrastructure-as-Code using multiple scanning tools (tfsec, Checkov, Terrascan for Terraform; KICS for Pulumi and Ansible) and conduct comparative analysis to identify misconfigurations and security issues.

Changes

Added labs/lab6/analysis/ansible-analysis.txt
Added labs/lab6/analysis/checkov-terraform-report.txt
Added labs/lab6/analysis/checkov-terraform-results.json
Added labs/lab6/analysis/kics-ansible-report.html
Added labs/lab6/analysis/kics-ansible-report.txt
Added labs/lab6/analysis/kics-ansible-results.json
Added labs/lab6/analysis/kics-pulumi-report.html
Added labs/lab6/analysis/kics-pulumi-report.txt
Added labs/lab6/analysis/kics-pulumi-results.json
Added labs/lab6/analysis/pulumi-analysis.txt
Added labs/lab6/analysis/terraform-comparison.txt
Added labs/lab6/analysis/terrascan-report.txt
Added labs/lab6/analysis/terrascan-results.json
Added labs/lab6/analysis/tfsec-report.txt
Added labs/lab6/analysis/tfsec-results.json
Added labs/lab6/analysis/tool-comparison.txt
Added labs/submission6.md

Testing

No testing

Artifacts & Screenshots

labs/lab6
├── analysis
│   ├── ansible-analysis.txt
│   ├── checkov-terraform-report.txt
│   ├── checkov-terraform-results.json
│   ├── kics-ansible-report.html
│   ├── kics-ansible-report.txt
│   ├── kics-ansible-results.json
│   ├── kics-pulumi-report.html
│   ├── kics-pulumi-report.txt
│   ├── kics-pulumi-results.json
│   ├── pulumi-analysis.txt
│   ├── terraform-comparison.txt
│   ├── terrascan-report.txt
│   ├── terrascan-results.json
│   ├── tfsec-report.txt
│   ├── tfsec-results.json
│   └── tool-comparison.txt
├── submission6.md
└── vulnerable-iac
    ├── README.md
    ├── ansible
    │   ├── configure.yml
    │   ├── deploy.yml
    │   ├── inventory.ini
    │   └── kics-report
    ├── pulumi
    │   ├── Pulumi-vulnerable.yaml
    │   ├── Pulumi.yaml
    │   ├── __main__.py
    │   ├── kics-report
    │   └── requirements.txt
    └── terraform
        ├── database.tf
        ├── iam.tf
        ├── main.tf
        ├── security_groups.tf
        └── variables.tf

Checklist

• Task 1 done — Terraform & Pulumi scanning with multiple tools
• Task 2 done — Ansible security analysis
• Task 3 done — Comparative tool analysis and security insights
• PR has a clear and descriptive title
• Documentation has been updated if necessary
• No sensitive data or large temporary files have been committed