tfdrift：基础设施漂移检测的严重性分类与风险分类框架
原标题：Demo: tfdrift - A Severity Taxonomy and Risk Classification Framework for Infrastructure Drift Detection
AI 摘要
tfdrift 是一个开源框架，用于检测基础设施漂移并对其风险进行分类。它提出了一种严重性分类法，将变更分为四个风险等级，并包含60多条规则，覆盖AWS、Azure和GCP。在150多个AWS工作区上的评估显示，警报量减少了73%，同时保留了94%的安全相关变更。该工具作为Python CLI实现，可通过pip安装。
正文节选
Demo: tfdrift — A Severity Taxonomy and Risk Classification Framework for Infrastructure Drift Detection Abstract Infrastructure as Code (IaC) tools like Terraform have become the standard for declarative cloud resource management, yet configuration drift — where deployed infrastructure diverges from its declared state — remains a persistent operational and security challenge. Current detection approaches treat all changes equivalently, contributing to alert fatigue that causes operators to miss