Abstract: A method, including accessing a corpus of source code listings including respective code elements, and accessing a repository of validation rules defining respective acceptable security parameters for the code elements. The validation rules are applied to the code elements so as to identify a first set of the code elements not in compliance with the validation rules and a second set of the code elements in compliance with the validation rules. A first code element not in compliance with a given validation rule is selected from the first set, and one or more second code elements in compliance with the given validation rule are identified in the second set. Finally, the first and the second code elements can be output together so as to invoke a revision of the first code element.

Abstract: A method, including accessing a corpus or infrastructure as code modules including respective resource definitions for provisioning and deploying a plurality of computing resources configured to execute one or more software applications. A repository of validation rules are accessed that define respective acceptable configuration parameters for the resource definitions, and the validation rules are applied to the resource definitions so as to identify a first set of the resource definitions not in compliance with the validation rules and a second set of the resource definitions in compliance with the validation rules. A first resource definition not in compliance with a given validation rule is selected from the first set, and one or more second resource definitions are identified in the second set that are compliant with the given validation rule. Finally, the first and the second resource definitions are output together to invoke a revision of the first resource definition.

Abstract: A method, including accessing a corpus or infrastructure as code modules including respective resource definitions for provisioning and deploying a plurality of computing resources configured to execute one or more software applications. A repository of validation rules are accessed that define respective acceptable configuration parameters for the resource definitions, and the validation rules are applied to the resource definitions so as to identify a first set of the resource definitions not in compliance with the validation rules and a second set of the resource definitions in compliance with the validation rules. A first resource definition not in compliance with a given validation rule is selected from the first set, and one or more second resource definitions are identified in the second set that are compliant with the given validation rule. Finally, the first and the second resource definitions are output together to invoke a revision of the first resource definition.