aquasecurity/cloudsploit

View on GitHub

Cloud Security Posture Management (CSPM)

Stars: 3.8k
Forks: 751
Open beginner issues: 2
Indexed issues: 132
Avg merge: 7d 59m
Merged PRs (30d): 2

Dominant language: JavaScript
License: GPL-3.0
Last GitHub push: Sep 7, 2026
Latest indexed: Sep 14, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: help wanted

Beginner friendly Everything

Open All

132 open issues indexed

[AWS] Scan fails with "Error [TypeError]: AWS[serviceName] is not a constructor" Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

aquasecurity/cloudsploit#2176 · 1 comment · Opened Dec 1, 2025
[AWS] Missing spec.js files - Had to remove these scans before I could get results Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

aquasecurity/cloudsploit#2174 · Opened Nov 29, 2025
Azure Findings Show as UNKNOWN Even With Full Permissions Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

aquasecurity/cloudsploit#2160 · Opened Nov 16, 2025
[GCP] Scans not functioning due to incorrect field name in credential file documentation Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

aquasecurity/cloudsploit#2159 · 1 comment · Opened Nov 14, 2025
Aqua no longer owns the freshdesk portal, so bit.ly links go nowhere Open

Difficulty 1/5 Under an hour Newbie friendliness 45/100

aquasecurity/cloudsploit#2154 · Opened Sep 16, 2025
Propose to include AWS role to ensure credentials are not exposed for running the scans Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

aquasecurity/cloudsploit#2153 · 2 comments · Opened Sep 5, 2025
Propose to include Severity for plugins (Critical, High, Medium, Low) Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

aquasecurity/cloudsploit#2152 · 1 comment · Opened Sep 5, 2025
Vulnerabilities found by docker image scan Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

aquasecurity/cloudsploit#2136 · Opened Apr 22, 2025
Docker setup fails with "executable file not found in $PATH: unknown." Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

aquasecurity/cloudsploit#2131 · 2 comments · 1 reaction · Opened Mar 3, 2025
CVE-2024-21538: HIGH vulnerability in cross-spawn dependency Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

aquasecurity/cloudsploit#2128 · Opened Feb 17, 2025
Unable to use skip_locations for Azure Cloud Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

aquasecurity/cloudsploit#2091 · Opened Oct 18, 2024
getaddrinfo EAI_AGAIN Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

aquasecurity/cloudsploit#2088 · Opened Sep 11, 2024
Incorrect name in ecsClusterActiveService plugin Open

Difficulty 1/5 Under an hour Newbie friendliness 35/100

aquasecurity/cloudsploit#2077 · 1 reaction · Opened Jul 30, 2024
Unable to run the cloudsploit scan Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

aquasecurity/cloudsploit#2059 · 4 comments · 1 reaction · Opened Jul 3, 2024
Alicloud documentation Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

aquasecurity/cloudsploit#2024 · 1 comment · Opened May 30, 2024
Unable to run Azure Cloud scan Open

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

aquasecurity/cloudsploit#1989 · Opened Apr 10, 2024
Authenticate with AWS IAM Identity Center User Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

aquasecurity/cloudsploit#1988 · Opened Apr 2, 2024
ECR - Scan on push at the repository level deprecated Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

aquasecurity/cloudsploit#1905 · Opened Feb 9, 2024
Is CloudSploit Support Run Scanning Against Multiple Azure Subscriptions ? Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

aquasecurity/cloudsploit#1892 · Opened Jan 31, 2024
Authentication via Azure/GCP/AWS CLI Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

aquasecurity/cloudsploit#1874 · Opened Jan 26, 2024
AWS Exposed VPC endpoints plugin doesn't properly detect private subnets Open

Difficulty 2/5 1-3 hours Newbie friendliness 50/100

aquasecurity/cloudsploit#1856 · 1 reaction · Opened Jan 17, 2024
How can I scan all my GCP projects in a single organization ? Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

aquasecurity/cloudsploit#1853 · 2 comments · Opened Jan 12, 2024
Cloudsploit error when used with GCP user account and application_default_credentials.json Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

aquasecurity/cloudsploit#1844 · 2 comments · 3 reactions · Opened Jan 9, 2024
Cloudsploit error when running in Docker Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

aquasecurity/cloudsploit#1802 · 2 comments · Opened Dec 19, 2023
Have cloudsploit target a list of resources Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

aquasecurity/cloudsploit#1731 · 2 comments · Opened Nov 11, 2023
./index.js --suppress *:us-east-1:* - command not working Open

help wanted

aquasecurity/cloudsploit#1729 · 10 comments · 1 assignee · Opened Oct 18, 2023
Azure no result Open

bug

aquasecurity/cloudsploit#1728 · 9 comments · 1 reaction · 1 assignee · Opened Oct 5, 2023
SARIF output handler Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

aquasecurity/cloudsploit#1726 · 2 comments · 2 reactions · Opened Sep 29, 2023
S3 Bucket Enforce Object Encryption and S3 Bucket Encryption Enforcement plugin fails when Principal is AWS: * Open

hotfix

aquasecurity/cloudsploit#1725 · 1 comment · 1 assignee · Opened Sep 26, 2023
Migrate cloudsploit AWS SDK for JavaScript from v2 to v3 Open

dependencies enhancement

aquasecurity/cloudsploit#1724 · 4 comments · 3 reactions · 1 assignee · Opened Sep 25, 2023
User is not authorized for multiple plugins Open

help wanted

aquasecurity/cloudsploit#1708 · 7 comments · 1 assignee · Opened Sep 1, 2023
No Plugin is running for Oracle Open

help wanted

aquasecurity/cloudsploit#1690 · 3 comments · 1 reaction · 1 assignee · Opened Aug 14, 2023
CloudResourceManager plugins always return status OK regardless of policies configuration Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

aquasecurity/cloudsploit#1608 · 1 comment · Opened Apr 28, 2023
Additional Fields in Data Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

aquasecurity/cloudsploit#1607 · Opened Apr 21, 2023
root@ubuntu:/tmp/cloudsploit# ./index.js bash: ./index.js: Permission denied Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

aquasecurity/cloudsploit#1587 · 1 comment · Opened Mar 24, 2023
GCP CIS compliance Open

help wanted

aquasecurity/cloudsploit#1578 · 1 assignee · Opened Mar 10, 2023
CIS Benchmark Mapping for GCP Open

reviewed

Difficulty 4/5 3-5 days Newbie friendliness 25/100

aquasecurity/cloudsploit#1576 · 2 comments · Opened Mar 2, 2023
Update nodemon to v.2.0.20 Open

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

aquasecurity/cloudsploit#1553 · Opened Feb 17, 2023
Update mocha to v.10.2.0 Open

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

aquasecurity/cloudsploit#1552 · Opened Feb 17, 2023
Error: Unable to scan Github scan in accordance with the instructions in included docs. Open

Difficulty 3/5 1-2 days Newbie friendliness 38/100

aquasecurity/cloudsploit#1546 · Opened Feb 10, 2023
docker 无法构建 Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

aquasecurity/cloudsploit#1545 · Opened Feb 9, 2023
Ability to use downloaded CIS Benchmarks? Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

aquasecurity/cloudsploit#1522 · Opened Jan 25, 2023
error [TypeError]: region.spilit is not a function Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

aquasecurity/cloudsploit#1499 · 1 comment · 2 reactions · Opened Dec 29, 2022
ftpsOnlyAccessEnabled.js is returning incorrect results Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

aquasecurity/cloudsploit#1456 · Opened Nov 8, 2022
ADD plugins information on json and csv Open

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

aquasecurity/cloudsploit#1419 · Opened Oct 14, 2022
Import and run specific CIS Benchmark or DISA STIG? Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

aquasecurity/cloudsploit#1404 · Opened Sep 28, 2022
Oracle cloud scan 505 certificate has expired Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

aquasecurity/cloudsploit#1376 · 3 comments · 1 reaction · Opened Sep 12, 2022
unable scan azure environment using cloudspolit Open

help wanted

aquasecurity/cloudsploit#1375 · 7 comments · 1 reaction · 1 assignee · Opened Sep 12, 2022
Microsoft Azure ADAL to MSAL migration Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

aquasecurity/cloudsploit#1355 · Opened Aug 30, 2022
False positives for some regions Open

help wanted

aquasecurity/cloudsploit#1353 · 1 comment · 1 assignee · Opened Aug 29, 2022

aquasecurity/cloudsploit

Get new issues in your inbox