IaC SecFix Multi Agent
IaC-SecFix is a scanner-verified Infrastructure-as-Code remediation prototype for Terraform and Kubernetes. It combines an agentic remediation loop with deterministic security validation: the system ingests an IaC file, runs Checkov to identify misconfigurations, retrieves policy context, generates a Qwen-based patch, validates the patched file again, and routes the result through safety and human approval gates. The application is designed for trustworthy cloud security workflows. It does not apply infrastructure changes automatically. Instead, it produces reviewable patches, explains what changed, shows findings before and after remediation, and rejects or flags results when unresolved issues remain. The Hugging Face Space supports reliable demo playback from persisted benchmark artifacts, with optional live Qwen/vLLM inference when GPU access is available. The project demonstrates typed Pydantic contracts, structured agent outputs, scanner-backed validation, parser checks, traceable decisions, and a conservative safety posture for AI-assisted DevSecOps.
Category tags:For Innovators & Creators