Skip to content

Powerpipe: Dashboards for DevOps. Visualize cloud configurations. Assess security posture against a massive library of benchmarks. Build custom dashboards with code.

License

Notifications You must be signed in to change notification settings

sbldevnet/powerpipe

 
 

Repository files navigation

mods   slack   maintained by

Powerpipe is dashboards and benchmarks as code. Use it to visualize any data source, and run compliance benchmarks and controls, for effective decision-making and ongoing compliance monitoring.

Benchmarks - 5,000+ open-source controls from CIS, NIST, PCI, HIPAA, FedRamp and more. Run instantly on your machine or as part of your deployment pipeline.

Relationship Diagrams - The only dashboarding tool designed from the ground up to visualize DevOps data. Explore your cloud, understand relationships, drill down to the details.

Dashboards & Reports - High-level dashboards provide a quick overview. Use them to highlight misconfigurations and hotspots. Filter, pivot, and snapshot results.

Code, not clicks - Our dashboards are code: version-controlled, composable, shareable, easy to edit — designed for the way you work. Join our open-source community!

Demo Time!

Watch on YouTube →

Powerpipe demo

Install Powerpipe

The downloads page shows you how, but tl;dr:

Linux or WSL

sudo /bin/sh -c "$(curl -fsSL https://powerpipe.io/install/powerpipe.sh)"

MacOS

brew tap turbot/tap
brew install powerpipe

Your first dashboard

Dashboards use charts, tables, and interactive widgets to help you explore and visualize your resources. For example, the RNAcentrals mod visualizes a dataset of RNA types. To run the RNACentral dashboard:

mkdir rna && cd rna
powerpipe mod install https://github.com/turbot/powerpipe-mod-rnacentral
powerpipe server --database postgres://reader:[email protected]:5432/pfmegrnargs

View your dashboard at http://localhost:9033

rnacentral

Dashboards and Benchmarks with Steampipe

Many Powerpipe mods includes benchmarks that check your cloud resources for compliance. The Net Insights mod provides configuration, compliance and security controls to validate security best practices for DNS records. To run the SSL/TLS Best Practices benchmark:

# Net insights uses the net plugin from Steampipe
steampipe plugin install net
steampipe service start

# Install the Powerpipe mod
mkdir net && cd net
powerpipe mod install https://github.com/turbot/powerpipe-mod-net-insights

# Start the dashboard server
powerpipe server

View your dashboard at http://localhost:9033

net insights dashboard

You can run benchmarks as dashboards too! Here's the console ouput.

powerpipe benchmark run benchmark.ssl_certificate_best_practices --output=brief

net insights console

Developing

Developing Powerpipe

Prerequisites:

  • Golang Version 1.21 or higher.

Clone github.com/powerpipe and github.com/turbot/pipe-fittings repositories:

git clone https://github.com/turbot/powerpipe
git clone https://github.com/turbot/pipe-fittings
cd powerpipe

The build lands in /usr/local/bin/ unless OUTPUT_DIR is specified.

make

Check the version:

powerpipe --version
Powerpipe v0.1.0-local.1

Open Source & Contributing

This repository is published under the AGPL 3.0 license. Please see our code of conduct. Contributors must sign our Contributor License Agreement as part of their first pull request. We look forward to collaborating with you!

Powerpipe is a product produced from this open source software, exclusively by Turbot HQ, Inc. It is distributed under our commercial terms. Others are allowed to make their own distribution of the software, but cannot use any of the Turbot trademarks, cloud services, etc. You can learn more in our Open Source FAQ.

Get Involved

Join #powerpipe on Slack →

Want to help but don't know where to start? Pick up one of the help wanted issues:

About

Powerpipe: Dashboards for DevOps. Visualize cloud configurations. Assess security posture against a massive library of benchmarks. Build custom dashboards with code.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • TypeScript 52.1%
  • Go 32.9%
  • JavaScript 5.4%
  • Shell 3.2%
  • Puppet 2.0%
  • SourcePawn 1.2%
  • Other 3.2%