Category: Security — Stategraph

13 Infrastructure as Code Tools To Improve Your Workflow

Josh Pollara • September 1, 2026

Infrastructure as Code Terraform DevOps Security

Infrastructure as code tools span provisioning, config management, scanning, and GitOps workflows. Compare 13 real options with verified GitHub stars.

Terraform Security Practices that Hold Up at Scale

Josh Pollara • August 10, 2026

Terraform Security Best Practices AWS

A Terraform security checklist covers scanning and secrets, but not blast radius or state locking. See what a full review actually requires.

Checkov Terraform: What Checkov Is & What It Catches and Misses

Josh Pollara • July 8, 2026

Terraform Checkov Security

Learn what Checkov is, how a Checkov Terraform scan works, how to wire it into GitHub Actions, and why passing a scan doesn't mean staying compliant.

Cross-state reads, without the whole state: Solving Terraform remote state

Josh Pollara • May 11, 2026

Terraform State Management Security Stategraph Velocity

Terraform remote state helps share output values across configurations, but broad state access can expose more data than each module needs.

Blog

13 Infrastructure as Code Tools To Improve Your Workflow

Terraform Security Practices that Hold Up at Scale

Checkov Terraform: What Checkov Is & What It Catches and Misses

Cross-state reads, without the whole state: Solving Terraform remote state