alphacrack/iac-scanner

Sign in to follow View on GitHub

An agentic AI–powered IaC scanner that evaluates cloud infrastructure against security and compliance benchmarks. It also delivers cost analysis and AWS Well-Architected recommendations, with support for custom policies, checks, and configurable exceptions.

Is alphacrack/iac-scanner beginner-friendly?

We have not seen enough recent pull requests from outside contributors to alphacrack/iac-scanner to say how often they are merged. No beginner-friendly issue is open right now; the list below has the other issues we hold for it.

Stars
4
Forks
10
Open beginner issues
0
Indexed issues
18
Avg merge
13d 6h
Merged PRs (30d)
2
Dominant language
Python
License
Apache-2.0
Last GitHub push
Nov 14, 2026
Latest indexed
Nov 14, 2026
Contributing guide
Code of conduct
Beginner labels
help wanted good first issue

How to contribute to alphacrack/iac-scanner

  1. Read the contributing guide first: it says how the maintainers want changes proposed, tested and reviewed.
  2. Read its code of conduct: it covers issues and pull requests as well as chat.
  3. Your contributions will be published under the project's Apache-2.0 license.
  4. Follow the repository to hear when a new beginner-friendly issue opens, or look through the other issues below.
Beginner friendly Everything
Open All

Issues somebody may already be working on are listed last. List everything by date

  • Great Repository!
    Open
    • Is something wrong?
    stale

    Difficulty 1/5 Under an hour Newbie friendliness 5/100

    alphacrack/iac-scanner#78 · 1 comment ·

  • Good first issues — start here (contributor onboarding)
    Open
    • Is something wrong?
    good first issue help wanted oss-collab

    Difficulty 2/5 1-3 hours Newbie friendliness 35/100

    alphacrack/iac-scanner#67 ·

  • Publish iac-scanner-cdk-nag companion to PyPI
    Open
    • Is something wrong?
    area:release area:rules help wanted type:chore

    Difficulty 3/5 1-2 days Newbie friendliness 15/100

    alphacrack/iac-scanner#66 ·

  • New LLM provider: Amazon Bedrock / Google Gemini
    Open
    • Is something wrong?
    area:llm help wanted type:feature

    Difficulty 3/5 1-2 days Newbie friendliness 45/100

    alphacrack/iac-scanner#65 ·

  • New IaC type: AWS CloudFormation scanner
    Open
    • Is something wrong?
    area:scanners help wanted type:feature

    Difficulty 3/5 1-2 days Newbie friendliness 35/100

    alphacrack/iac-scanner#64 ·

  • New IaC type: Pulumi scanner
    Open
    • Is something wrong?
    area:scanners help wanted type:feature

    Difficulty 4/5 3-5 days Newbie friendliness 55/100

    alphacrack/iac-scanner#63 ·

  • Add --apply flag to write fixes in place
    Open
    • Is something wrong?
    area:cli area:orchestration help wanted priority:high type:feature

    Difficulty 4/5 3-5 days Newbie friendliness 25/100

    alphacrack/iac-scanner#62 · 1 comment ·

  • Hybrid: post-fix re-verification (re-run rule engine on fixed code)
    Open
    • Is something wrong?
    area:orchestration area:rules help wanted priority:medium type:feature

    Difficulty 4/5 3-5 days Newbie friendliness 22/100

    alphacrack/iac-scanner#61 · 1 comment ·

  • CI: compile/synth the CDK sample (not just parse it)
    Open
    • Is something wrong?
    area:ci help wanted iac:cdk type:chore

    Difficulty 3/5 Half a day Newbie friendliness 62/100

    alphacrack/iac-scanner#60 ·

  • Add unit tests for the cost-budget preflight path
    Open
    • Is something wrong?
    area:cost good first issue help wanted type:test

    Difficulty 2/5 1-3 hours Newbie friendliness 82/100

    alphacrack/iac-scanner#59 ·

  • Flip coverage to a hard --cov-fail-under=80 gate
    Open
    • Is something wrong?
    area:ci good first issue type:chore

    Difficulty 2/5 1-3 hours Newbie friendliness 55/100

    alphacrack/iac-scanner#58 ·

  • Extend secret-redaction patterns (GitHub PAT, Slack, Google API keys)
    Open
    • Is something wrong?
    area:scanners good first issue help wanted type:security

    Difficulty 2/5 1-3 hours Newbie friendliness 82/100

    alphacrack/iac-scanner#57 ·

  • Add a --quiet flag to the CLI for clean CI logs
    Open
    • Is something wrong?
    area:cli good first issue help wanted type:enhancement

    Difficulty 2/5 1-3 hours Newbie friendliness 82/100

    alphacrack/iac-scanner#56 ·

  • Audit IAC_* env-var docs for completeness
    Open
    • Is something wrong?
    area:docs good first issue type:docs

    Difficulty 2/5 1-3 hours Newbie friendliness 82/100

    alphacrack/iac-scanner#54 ·

  • Export a JSON Schema for scan-report.json
    Open
    • Is something wrong?
    area:docs good first issue help wanted type:enhancement

    Difficulty 2/5 1-3 hours Newbie friendliness 75/100

    alphacrack/iac-scanner#53 ·

  • Add example invocations to CLI --help epilog
    Open
    • Is something wrong?
    area:cli good first issue type:enhancement

    Difficulty 1/5 Under an hour Newbie friendliness 88/100

    alphacrack/iac-scanner#52 ·

  • Verify + add README badges now that 0.5.0 is on PyPI
    Open
    • Is something wrong?
    area:docs good first issue priority:low type:docs

    Difficulty 1/5 Under an hour Newbie friendliness 78/100

    alphacrack/iac-scanner#49 · 1 comment ·

  • Add a clean (zero-findings) Terraform + CDK sample
    Possibly taken Open
    • Is something wrong?
    area:scanners good first issue help wanted type:test

    Difficulty 2/5 1-3 hours Newbie friendliness 25/100

    alphacrack/iac-scanner#51 · 2 comments ·

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.