...
Since both ONAP and Nephio (and also O-RAN SC SMO) are under LFN, maybe handling IaC scanning at the LFN level could be beneficial.
Tool evaluations
Checkov,
- https://www.checkov.io/1.Welcome/What%20is%20Checkov.html
- https://www.checkov.io/2.Basics/Visualizing%20Checkov%20Output.html
More to come...