Git & IaC Scanning
Connect your Git provider to correlate deploys with commits, and scan your infrastructure code for security misconfigurations before they reach production.
Connect Git
- 1Click New Connection and choose your provider (GitHub, GitLab, Bitbucket).
- 2Enter a name, Personal Access Token (PAT), and organization/group.
- 3KeelPilot validates the token and lists repositories.
- 4Link a repository to an Environment to correlate deploys with commits.
Pipelines
View pipeline runs from GitHub Actions, GitLab CI, and Bitbucket Pipelines. Filter by connection, repository, and branch to see status, duration, and the associated commit.
IaC security scanning
Analyze your repositories for security issues and best practices:
- Dockerfile — insecure base images, root user, secrets in build.
- Kubernetes — privileged pods, missing limits, hostNetwork.
- Terraform — public S3 buckets, open security groups, missing encryption.
- Helm — insecure values in templates.
Scan policies
Create policies that define which rules to apply, enable or disable individual rules, and set a minimum severity for blocking.