From acb9e893ea8e51df6e2dc496eafcf86a0fbb55ad Mon Sep 17 00:00:00 2001
From: Felix <124020340+FelixsJiang@users.noreply.github.com>
Date: Mon, 20 Mar 2023 14:51:59 +0800
Subject: [PATCH 1/2] Add Selefra

Add an open-source policy-as-code software that provides analytics for multi-cloud and SaaS.
---
 README.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/README.md b/README.md
index 0ff5fcc..584a3e7 100644
--- a/README.md
+++ b/README.md
@@ -69,6 +69,7 @@ A curated list of awesome cloud security related resources.
 * [pacu](https://github.com/RhinoSecurityLabs/pacu): The AWS exploitation framework.
 * [Prowler](https://github.com/toniblyx/prowler): Command line tool for AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool.
 * [ScoutSuite](https://github.com/nccgroup/ScoutSuite): Multi-cloud security auditing tool.
+* [Selefra](https://github.com/selefra/selefra): An open-source policy-as-code software that provides analytics for multi-cloud and SaaS.
 * [Security Monkey](https://github.com/Netflix/security_monkey): Monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time.
 * [SkyWrapper](https://github.com/cyberark/SkyWrapper): Tool helps to discover suspicious creation forms and uses of temporary tokens in AWS.
 * [Smogcloud](https://github.com/BishopFox/smogcloud): Find cloud assets that no one wants exposed.

From ee32be645e5b9be1cc305020da6cc6353a1b9180 Mon Sep 17 00:00:00 2001
From: Felix <124020340+FelixsJiang@users.noreply.github.com>
Date: Tue, 21 Mar 2023 17:50:09 +0800
Subject: [PATCH 2/2] Modify the selefra category

---
 README.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index 584a3e7..966226b 100644
--- a/README.md
+++ b/README.md
@@ -68,8 +68,7 @@ A curated list of awesome cloud security related resources.
 * [pacbot](https://github.com/tmobile/pacbot): Policy as Code Bot.
 * [pacu](https://github.com/RhinoSecurityLabs/pacu): The AWS exploitation framework.
 * [Prowler](https://github.com/toniblyx/prowler): Command line tool for AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool.
-* [ScoutSuite](https://github.com/nccgroup/ScoutSuite): Multi-cloud security auditing tool.
-* [Selefra](https://github.com/selefra/selefra): An open-source policy-as-code software that provides analytics for multi-cloud and SaaS.
+* [ScoutSuite](https://github.com/nccgroup/ScoutSuite): Multi-cloud security auditing tool
 * [Security Monkey](https://github.com/Netflix/security_monkey): Monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time.
 * [SkyWrapper](https://github.com/cyberark/SkyWrapper): Tool helps to discover suspicious creation forms and uses of temporary tokens in AWS.
 * [Smogcloud](https://github.com/BishopFox/smogcloud): Find cloud assets that no one wants exposed.
@@ -96,6 +95,7 @@ A curated list of awesome cloud security related resources.
 * [Lambda Guard](https://github.com/Skyscanner/LambdaGuard): AWS Lambda auditing tool.
 * [Policy Sentry](https://github.com/salesforce/policy_sentry): IAM Least Privilege Policy Generator.
 * [S3 Inspector](https://github.com/kromtech/s3-inspector): Tool to check AWS S3 bucket permissions.
+* [Selefra](https://github.com/selefra/selefra): An open-source policy-as-code software that provides analytics for multi-cloud and SaaS.
 * [Serverless Goat](https://github.com/OWASP/Serverless-Goat): A serverless application demonstrating common serverless security flaws.
 * [SkyArk](https://github.com/cyberark/SkyArk): Tool to helps to discover, assess and secure the most privileged entities in Azure and AWS.