soluble-cli

Lacework IAC CLI

This is the command line interface for Lacework IAC Security.

Installation

On MacOS use homebrew:

brew install soluble-ai/soluble/soluble-cli

To upgrade to the latest version:

brew upgrade soluble-ai/soluble/soluble-cli

On linux, run:

wget -O - https://raw.githubusercontent.com/soluble-ai/soluble-cli/master/linux-install.sh | sh

Or:

curl https://raw.githubusercontent.com/soluble-ai/soluble-cli/master/linux-install.sh | sh

The install will drop the executable in the current directory. If you run this as root or can sudo to root, the install will try to move the binary to /usr/local/bin/soluble.

Windows executables can be found on the releases page.

Run Security Scans

First, you'll need to signup with Lacework IAC:

soluble login

Now you can run security scans on your code:

# scan terraform IAC
soluble terraform-scan -d ~/my-stuff
# scan for secrets
soluble secrets-scan -d ~/my-stuff
# scan kubernetes manifests
soluble kubernetes-scan -d ~/my-stuff
# scan Helm charts
soluble helm-scan -d ~/my-stuff

See https://docs.lacework.com/iac/ for more information.

Run As Component

Follow the installation steps from Lacework CLI to configure it https://docs.lacework.net/cli/

Run the below commands to get a release version of soluble cli running as IaC component under the lacework cli.

lacework component install iac

# verify the installation of iac component
lacework component list

# verify the iac configuration as Component
lacework iac config show

Run As Component with local changes

Follow the installation steps from Lacework CLI to configure it https://docs.lacework.net/cli/

Run the script to test local changes

./scripts/lacework.sh tf-scan