# Security tooling and processes

WIP document to list Security tools/process and their documentation. Sensitive information stored in [Google Drive](https://docs.google.com/document/d/10oocqojeIM0uZpcOl6L76afDYj3-MLsFxRK2jhOg93E/).

- [Blocking IPs in Cloudflare](https://docs.google.com/document/d/17FV8pjbJNrhAtW9lvGIbJ1jSkXe0mRw4ci7w0084RBE/edit#heading=h.jpz7uaphhdtk)

## CI/CD Pipeline Vulnerability Scanning

- We are currently using Checkov.io to [scan our IaC](../checkov.md) and [Trivy](../trivy.md) to scan containers.


<section class="h0Wrapper headingWrapper"><section class="h1Wrapper headingWrapper"><h1 id="security-tooling-and-processes"><a class="anchor" aria-hidden tabindex="-1" href="#security-tooling-and-processes"><span class="icon icon-link"></span></a>Security tooling and processes</h1>
<p>WIP document to list Security tools/process and their documentation. Sensitive information stored in <a href="https://docs.google.com/document/d/10oocqojeIM0uZpcOl6L76afDYj3-MLsFxRK2jhOg93E/">Google Drive</a>.</p>
<ul>
<li><a href="https://docs.google.com/document/d/17FV8pjbJNrhAtW9lvGIbJ1jSkXe0mRw4ci7w0084RBE/edit#heading=h.jpz7uaphhdtk">Blocking IPs in Cloudflare</a></li>
</ul>
<section class="h2Wrapper headingWrapper"><h2 id="cicd-pipeline-vulnerability-scanning"><a class="anchor" aria-hidden tabindex="-1" href="#cicd-pipeline-vulnerability-scanning"><span class="icon icon-link"></span></a>CI/CD Pipeline Vulnerability Scanning</h2>
<ul>
<li>We are currently using Checkov.io to <a href="../checkov">scan our IaC</a> and <a href="../trivy">Trivy</a> to scan containers.</li>
</ul></section></section></section>