Bumper
Infrastructure as CodeA deterministic safety gate that blocks destructive Terraform applies and vulnerable/malicious dependency installs before they happen
Features
- Scans Terraform plan JSON to detect destructive changes (e.g., resource replacement without snapshots) and security‑related modifications
- Analyzes lockfiles for known CVEs and malicious packages across multiple ecosystems (npm, pip, Go, etc.)
- Provides deterministic exit codes for CI/CD integration (0 = clean, 1 = findings)
- Offers optional AI‑driven plain‑English explanations via `--explain` or agent hooks
Recent releases
View all 4 releases →Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Install & Platforms
Install via
brew
shell-script
go
Platforms
linux
macos
