Libre DevOps
Change the repository type filter
All
Repositories list
229 repositories
- 🛡️ Terraform module for Azure Machine Configuration: onboard Windows/Linux VMs, assign CIS + compute security baselines, and enforce custom DSC packages with dr…
powershell-helpers
Public🧰 Enterprise-grade PowerShell helpers for Azure, Terraform, Microsoft Graph and DevOps tooling (the Ldo-prefixed LibreDevOpsHelpers module)security-news
Publiclibredevops-dot-org
Public🌐 Source for the Libre DevOps website and the published DevOps standards (Terraform, Azure naming, PowerShell, logging, CI/CD)- 🛡️ Terraform module for the Microsoft Defender XDR (MicrosoftThreatProtection) Sentinel data connector via azapi, with explicit alert and incident sync
- 🔌 Sentinel Codeless Connector Framework (CCF) as code: RestApiPoller connectors with auto-derived UI, typed auth and paging, over azapi
terraform-rego-policies
Public- 📊 Log Analytics summary rules as code: scheduled KQL aggregation into cheap Analytics tables, the full 2025-07-01 surface typed and validated
- 🕵️ Defender XDR custom detection rules as code: analyst authored YAML per rule, plan-time schema validation, curated baseline, gated response actions, via Micro…
- 🔄 Consumption Logic App workflow shells: typed parameters, shared connections, access control, hidden-title, per the Libre DevOps standard
- 🛡️ Terraform module (Microsoft Graph) to triage and manage Microsoft Defender unified security incidents and alerts, comments, and custom detection rules
- 🧠 Experimental Terraform module for Microsoft Security Copilot: compute capacity (azapi) and the beta Graph securityCopilot data-plane (workspaces, sessions, pr…
terraform-azuread-group
Public👥 Terraform module for Microsoft Entra (Azure AD) groups and PIM for Groups: security and M365 groups, membership, and privileged access group eligibility, assi…- 🛡️ Terraform module for Microsoft Entra (Azure AD) directory roles: activate built-in roles, define custom roles, and assign them to users, groups or service pr…
- 🔑 Terraform module for Microsoft Entra (Azure AD) applications and service principals: credentials, federated identity, published roles and scopes, and admin-co…
- 🔁 Reverse DNS as an overlay: derive and link in-addr.arpa zones onto existing vnets
- 🌐 Terraform module for Azure private DNS zones: forward, reverse (CIDR-derived), and the full Private Link set, with vnet linking
terraform-azure
Public- 🚪 Azure Bastion hosts defaulting to the free Developer SKU: one attribute and you can connect, scaling to Basic, Standard and Premium per host
- 🪪 User-assigned managed identities with federated credentials, so workloads authenticate without a single client secret
- 🪟 Hardened-by-default Windows VMs: Trusted Launch, managed identity, a hotpatch-aware image catalog, and VM Insights in one attribute
- 🔐 Azure RBAC and PIM role assignments from one map, with a secure-by-default guard against re-delegating privileged roles
- 🐧 Hardened-by-default Linux VMs: SSH-only, Trusted Launch, managed identity, a verified image catalog, and VM Insights in one attribute
terraform-azurerm-tags
Publicterraform-azurerm-subnet
Public🧬 Terraform module to add subnets (with NSG/route-table associations and delegations) to an existing Azure virtual network; shares the subnet schema with the ne…terraform-azurerm-rg
Public🗂️ Terraform module for Azure resource groups from a list(object), with optional tags, managed_by and timeouts- 🧮 Terraform module to calculate non-overlapping Azure subnet CIDRs (sequential or pinned) from a base address space, dual-stack; companion to the network module
ProTip! When viewing an organization's repositories, you can use the
props. filter to filter by custom property.