Add ReleaseRun K8s/Docker/Terraform browser-based security scanners

[Matheus-RR]

What this adds

Three browser-based security scanners for cloud-native infrastructure:

Container

• K8s YAML Security Linter — Paste Kubernetes YAML, get an A-F security score. Checks 12 misconfigurations: runAsRoot, privileged containers, no resource limits, allowPrivilegeEscalation, readOnlyRootFilesystem, capability drops, hostNetwork/hostPID, hardcoded secrets in env vars, missing health probes, no seccomp profile.
• Docker Compose Security Checker — Paste docker-compose.yml, checks for Docker socket mounts, privileged containers, network_mode: host, mutable image tags (:latest), database ports on 0.0.0.0, hardcoded secrets, no resource limits, missing healthchecks.

Infrastructure

• Terraform Security Scanner — Paste .tf files, checks for hardcoded AWS credentials, SSH/database ports open to 0.0.0.0/0 (MySQL 3306, PostgreSQL 5432, Redis 6379, etc.), public S3 ACLs, missing aws_s3_bucket_public_access_block, RDS publicly_accessible = true, unencrypted RDS/EBS, deletion_protection = false, skip_final_snapshot = true.

All tools run entirely in the browser — no data sent to servers, no auth required.

ReleaseRun is a free developer tooling site focused on infrastructure health, EOL tracking, and upgrade safety.

[Copilot]

Pull request overview

Adds three new browser-based security scanning tools (Kubernetes YAML, Docker Compose, and Terraform) to the repository’s curated “Awesome Cloud Security” resource list.

Changes:

• Added ReleaseRun Terraform Security Scanner under Infrastructure tools.
• Added ReleaseRun Kubernetes YAML Security Linter under Tools listings.
• Added ReleaseRun Docker Compose Security Checker under Tools listings.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Matheus-RR]

Thanks for the Copilot review! I've updated the PR to address both issues:

1. Removed duplicate K8s YAML and Docker Compose entries from Infrastructure (they now appear only in the Container section where they belong)
2. Moved Terraform Security Scanner from the aws* block to after Open Policy Agent for correct alphabetical ordering (R comes after O, not between aws-vault and awspx)