Whilst there are some great examples of how to assess infrastructure as code dynamically with things like the Center for Internet Security‘s Docker benchmark and CoreOS‘s Clair, these kinda run a little too late in the pipeline for my liking. If we want to treat infrastructure as code then surely we ought to be performing […] The post Use Infrastructure as Code they said. Easier to audit they said… (part 1) appeared first on Portcullis Labs.