New Open Source Project Yor

Announcing the New Open Source Project Yor, Dynamic and Automated Cloud Infrastructure Tagging

Palo Alto Networks, the global cybersecurity leader, announced the release of Yor, an open-source tool that automatically tags cloud resources within infrastructure as code (IaC) frameworks Terraform, AWS CloudFormation, and Serverless Framework YAML. Yor automates the tedious work of manually tagging cloud resources, helps security teams trace security misconfigurations from code to cloud, and enables highly effective GitOps across all major cloud providers.

Organizations can run Yor across all infrastructure resources to retroactively assign ownership and other meaningful tags based on IaC and git history data. Yor can also be built into the continuous integration and continuous delivery (CI/CD) lifecycle for improved traceability as infrastructure is modified and created. Having consistent tagging will make it simple to trace any misconfigurations back to the original code owners and editors, reducing the time to patch.

The Cloud Security Alliance noted in its recent report The State of Cloud Security Concerns, Challenges, and Incidents that misconfigurations were among the leading causes of breaches and outages as public cloud adoption doubled over the past two years. If a security team identifies a misconfiguration, having the tags for the developer owner simplifies triaging, so the ticket can be automatically assigned to the right developer. Yor’s use cases also extend beyond security by making it easier to tag resources to allocate costs from a finance and budgeting perspective.

Yor was built by Bridgecrew, the team behind the popular open-source IaC scanner Checkov which has been downloaded over 2 million times by developers. Bridgecrew was acquired by Palo Alto Networks in March 2021 and together they continue to invest in new and existing open source projects.

Yor is an open-source tool that automatically and consistently tags resources across infrastructure as code (IaC) frameworks (e.g., Terraform, CloudFormation, Kubernetes, and Serverless Framework). Yor enables version-controlled owner assignment and resource tracing-based git history. It also extends tag enforcement logic by loading external tagging logic into your CI/CD pipeline. For more information, visit

Find out more by reading the full press release here.