IaC Authentication in Prowler

Prowler’s Infrastructure as Code (IaC) provider enables you to scan local or remote infrastructure code for security and compliance issues using Trivy. This provider supports a wide range of IaC frameworks and requires no cloud authentication for local scans.

Authentication

• For local scans, no authentication is required.
• For remote repository scans, authentication can be provided via:
  • GitHub Username and Personal Access Token (PAT)
  • GitHub OAuth App Token
  • Git URL