KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#developer-tools #typescript #codex #ai-agents #claude-code #dsh #dsh-plugin #cli #macos #ai-agent #deepseek-harness #open-source

Skyglass

★ 20 Open GitHub ↗

See your entire cloud infrastructure in one command. Interactive 2D graph. AWS + Azure + GCP. All local.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

<div align="center">
  <h1>skyglass</h1>
  <p><em>A looking glass for your cloud.</em></p>

<strong><code>npx skyglass-cli --demo</code></strong> &mdash; try it now, no credentials needed.

</div>

---

## Why

Your cloud has 200+ resources across 3 providers. The AWS Console shows you one service at a time. Terraform state is a JSON blob. CloudFormation outputs a wall of text.

Skyglass shows you **everything at once** — every resource, every connection, every dependency — in an interactive graph you can actually understand. One command. No config. No SaaS. Scan results stay on your machine.

---

## Quick Start

```bash
# Try instantly with sample data (no credentials needed)
npx skyglass-cli --demo

# Scan your real cloud infrastructure
npx skyglass-cli all

# Import from a Terraform state file
npx skyglass-cli --from terraform.tfstate
```

> **Note on icons.** Official AWS / Azure / GCP service icons are fetched on first load from the [tf2d2/icons](https://github.com/tf2d2/icons) GitHub CDN. Your cloud credentials, resources and scan data **never** leave your machine &mdash; only the icon SVGs are downloaded. Services without an official icon use a local SVG fallback.

---

## Compared to

| | skyglass | AWS Console | Cloudcraft | Terraform Graph |
|---|---------|-------------|------------|-----------------|
| **Interactive graph** | Yes | No | 2D isometric | 2D flat |
| **Multi-cloud** | AWS + Azure + GCP | AWS only | AWS only | Any (HCL only) |
| **Blast radius** | Yes | No | No | No |
| **Official icons** | Yes | N/A | Yes | No |
| **Real-time scan** | Yes | N/A | Manual | From state file |
| **Terraform import** | Yes | No | No | Yes |
| **Runs locally** | Yes | No | No | Yes |
| **Free** | Yes (MIT) | Yes | Paid | Yes |
| **Setup** | 1 command | N/A | Account | Terraform required |

---

## How it connects to your cloud

Skyglass runs **locally on your machine**. It uses the same credentials as your cloud CLI tools &mdash; no API keys, no SaaS account.

```
Your terminal                           Your browser
────────────                           ────────────
npx skyglass-cli all
     │
     ├─ Uses your local credentials:
     │   • AWS  → ~/.aws/credentials or env vars
     │   • Azure → az login session
     │   • GCP  → gcloud auth session
     │
     ├─ Scans cloud APIs (read-only)
     │   Only Describe*, List*, Get* calls
     │
     ├─ Builds a resource graph (nodes + edges)
     │
     ├─ Starts a local server ──────────► Opens interactive viewer
     │                                    on localhost
     └─ Scan results stay on your machine.
         (Official service icons are fetched
          from the public tf2d2/icons GitHub
          CDN on first load.)
```

**Prerequisites** &mdash; just be authenticated in your terminal:

```bash
# AWS (pick one)
aws configure                          # Access key
aws sso login                          # SSO

# Azure
az login

# GCP
gcloud auth application-default login
```

---

## Features

| | Feature | Description |
|---|---------|-------------|
| **Graph** | Interactive knowledge graph | Force-directed layout with official AWS/Azure/GCP service icons, animated traffic flow |
| **Scan** | Real-time discovery | EC2, RDS, Lambda, VPC, S3, AKS, CosmosDB, BigQuery, Cloud Run, and 40+ resource types |
| **Blast** | Blast radius mode | Click a resource to see cascading failure propagation with animated red cascade |
| **Zoom** | Semantic zoom | Zoom out for provider overview, zoom in for service details &mdash; 4 levels of detail |
| **Edges** | Typed connections | Color-coded: green=network, cyan=data, violet=dependency, white=cross-cloud |
| **Icons** | Official service icons | Real AWS/Azure/GCP architecture icons loaded from official icon sets |
| **Search** | Filter resources | Search by name, type, provider, or region &mdash; matching nodes highlight, rest fades |
| **Cost** | Cost analysis | See cost per resource, per provider, per category |
| **Export** | Screenshot & data | Export PNG screenshots, JSON, DOT (Graphviz), or CSV |
| **History** | Snapshot & diff | Save scan snapshots, compare changes over time |

### Blast Radius

Press `B` on any resource to see what would break if it failed. Skyglass walks the dependency graph and animates the cascade in red.

### Semantic Zoom

Zoom in to explore individual services with official icons, labels, and connection details.

---

## Supported Providers

| Provider | Resources | Status |
|----------|-----------|--------|
| **AWS** | EC2, RDS, Lambda, VPC, Subnets, S3, CloudFront, ECS, EKS, Secrets Manager, KMS, Redshift, ECR | Stable |
| **Azure** | AKS, VNets, CosmosDB, SQL Database, Function Apps, Blob Storage, Front Door, Redis, Service Bus, Key Vault, ACR | Beta |
| **GCP** | Cloud Run, BigQuery, GCS, Pub/Sub, VPC, Cloud SQL, Cloud Functions, Memorystore, Cloud DNS, Firestore, Cloud Armor | Beta |

All scans are **read-only**. Only `Describe*`, `List*`, and `Get*` API calls are used.

---

## Controls

| Input | Action |
|-------|--------|
| `drag` | Pan |
| `scroll` | Zoom (toward cursor) |
| `click` | Select resource |
| `double-click` | Zoom to resource |
| `hover` | Highlight connections + show tooltip |
| `/` | Search / filter |
| `B` | Toggle blast radius mode |
| `C` | Cost panel |
| `P` | Screenshot (PNG) |
| `F` | Fullscreen |
| `Esc` | Deselect / close |

---

## CLI Options

| Flag | Description | Default |
|------|-------------|---------|
| `<provider>` | `aws`, `azure`, `gcp`, or `all` | |
| `--demo`, `-d` | Run with sample multi-cloud data | |
| `--from <path>` | Import from Terraform state file | |
| `--region`, `-r` | Cloud region to scan | `us-east-1` |
| `--profiles` | Comma-separated AWS profiles (multi-account) | |
| `--subscription` | Azure subscription ID | `$AZURE_SUBSCRIPTION_ID` |
| `--project` | GCP project ID | `$GOOGLE_CLOUD_PROJECT` |
| `--redact` | Strip sensitive metadata (IPs, ARNs, endpoints) | |
| `--port` | Viewer port | `4173` |

---

## Tech Stack

| Layer | Technology |
|-------|-----------|
| **Renderer** | HTML Canvas 2D (zero dependencies &mdash; no WebGL, no Three.js) |
| **Layout** | Custom force-directed simulation with Barnes-Hut quadtree (Web Worker) |
| **Icons** | Official AWS/Azure/GCP architecture icons via [tf2d2/icons](https://github.com/tf2d2/icons) |
| **Framework** | React + TypeScript (strict) |
| **Scanners** | AWS SDK v3, Azure SDK, Google Cloud SDK (optional deps) |
| **Build** | Vite &mdash; 284 KB bundle (86 KB gzip) |

---

## Development

```bash
git clone https://github.com/itsyounish/Skyglass.git
cd Skyglass
npm install
npm run dev    # Dev server with demo data at localhost:5173
```

See [CONTRIBUTING.md](CONTRIBUTING.md) for guidelines.

---

## License

MIT &mdash; See [LICENSE](LICENSE) for details.

---

**Try it now:** <code>npx skyglass-cli --demo</code> &mdash; 10 seconds, no credentials, scan results stay on your machine.

If it's useful, [give it a star](https://github.com/itsyounish/Skyglass) so others can find it.

</div>

Skyglass

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README