On the recordRead 3 Oct 202621 facts
c7n-left
On the record
- CI integration
- Its GitHub output mode reports annotations directly into pull requests.cloudcustodian.io · read 3 Oct 2026
- CLI stability
- The documentation warns that the command-line interface is subject to change.cloudcustodian.io · read 3 Oct 2026
- Container security
- The project provides signed Docker images built on Chainguard's Wolfi Linux and documents verification with cosign.cloudcustodian.io · read 3 Oct 2026
- Default failure behavior
- Policy matches cause the run to exit with code 1 by default, while `--warn-on` can make selected matches log as warnings instead.cloudcustodian.io · read 3 Oct 2026
- Docker security
- The project provides signed Docker images based on Chainguard’s Wolfi Linux, and documents signature verification with cosign.cloudcustodian.io · read 3 Oct 2026
- IaC input
- c7n-left evaluates Terraform root modules, and remote module dependencies must be fetched with Terraform before running it.cloudcustodian.io · read 3 Oct 2026
- Install
- The package can be installed with `pip install c7n-left`.cloudcustodian.io · read 3 Oct 2026
- Install platforms
- The package supports Python above 3.10 on macOS and Linux, and recommends Docker images for Windows.cloudcustodian.io · read 3 Oct 2026
- Intended users
- The documentation says c7n-left is typically run in CI systems.cloudcustodian.io · read 3 Oct 2026
- Known limitation
- Remote Terraform module dependencies must be fetched with Terraform before c7n-left runs.cloudcustodian.io · read 3 Oct 2026
- License and price
- Cloud Custodian is open source, free for everyone to use, and distributed under the Apache 2.0 license.cloudcustodian.io · read 3 Oct 2026
- Policy checks
- Policies can check Terraform resources using Custodian filters, including tag checks and multi-hop resource traversal.cloudcustodian.io · read 3 Oct 2026
- Policy controls
- Command-line filters can select policies and resources by name, category, minimum severity, resource type, or ID.cloudcustodian.io · read 3 Oct 2026
- Policy language
- Policies support standard Custodian filters, multiple resource types, taggable-resource filtering, and multi-hop resource graph traversal.cloudcustodian.io · read 3 Oct 2026
- Policy testing
- c7n-left supports tests that match policy findings against assertions in plan files.cloudcustodian.io · read 3 Oct 2026
- Policy tests
- c7n-left supports policy tests using Terraform files and YAML or JSON assertion plans.cloudcustodian.io · read 3 Oct 2026
- Project and audience
- Cloud Custodian is an open-source rules engine for managing public cloud accounts and resources, with policies for security, compliance, tagging, and cost management.cloudcustodian.io · read 3 Oct 2026
- Project scope
- Cloud Custodian supports AWS, Azure, and GCP, with Kubernetes, Tencent Cloud, and OpenStack support described as beta on its homepage.cloudcustodian.io · read 3 Oct 2026
