gitops_iac_auditor

Example: GitOps IaC Security & Compliance Auditor

An automated DevSecOps daemon that monitors Infrastructure-as-Code (Kubernetes YAML, Terraform .tf, Dockerfiles) in a git repository directory and uses LibreChat to generate security audit reports.

Key Features

• Security Misconfiguration Detection: Identifies non-root container risks, missing CPU/memory limits, overly permissive ingress rules, and floating image tags.
• GitOps Alignment: Designed to run inside CI/CD pipelines, GitOps runner nodes, or background daemon processes.
• Markdown Audit Reports: Generates structured reports in ./reports/.

Running the Example

1. Ensure .env is configured with your LibreChat base URL and refresh token.
2. Run the auditor:

python examples/gitops_iac_auditor/main.py

3. Drop a Kubernetes YAML or Dockerfile into ./iac_repository/ to test automatic audit generation!