Category: Security — Stategraph

IaC Security: What it Catches and What it Misses

Josh Pollara • September 15, 2026

Security Infrastructure as Code Terraform DevOps

IaC security covers scanning, policy-as-code, and blast-radius awareness. See which risks each layer stops, and which ones risk slipping through.

IaC scanning tools, sorted by what they actually do

Josh Pollara • September 9, 2026

Security Infrastructure as Code Terraform DevOps

IaC scanning tools aren't one category. Compare 12 real options across four categories, with GitHub star counts verified live via the API.

13 Infrastructure as Code Tools To Improve Your Workflow

Josh Pollara • September 1, 2026

Infrastructure as Code Terraform DevOps Security

Infrastructure as code tools span provisioning, config management, scanning, and GitOps workflows. Compare 13 real options with verified GitHub stars.

Terraform Security Practices that Hold Up at Scale

Josh Pollara • August 10, 2026

Terraform Security Best Practices AWS

A Terraform security checklist covers scanning and secrets, but not blast radius or state locking. See what a full review actually requires.

Checkov Terraform: What Checkov Is & What It Catches and Misses

Josh Pollara • July 8, 2026

Terraform Checkov Security

Learn what Checkov is, how a Checkov Terraform scan works, how to wire it into GitHub Actions, and why passing a scan doesn't mean staying compliant.

Cross-state reads, without the whole state: Solving Terraform remote state

Josh Pollara • May 11, 2026

Terraform State Management Security Stategraph Velocity

Terraform remote state helps share output values across configurations, but broad state access can expose more data than each module needs.

Blog

IaC Security: What it Catches and What it Misses

IaC scanning tools, sorted by what they actually do

13 Infrastructure as Code Tools To Improve Your Workflow

Terraform Security Practices that Hold Up at Scale

Checkov Terraform: What Checkov Is & What It Catches and Misses

Cross-state reads, without the whole state: Solving Terraform remote state