same, and also PlainTasks, which is the only tofo list working for me:

https://github.com/aziz/PlainTasks

+1 for PlainTasks. I use it exclusively to maintain my TODO lists now.

This is really great! Definitely giving this a try now.

Is it possible to add custom rules to security monkey? Is there a Howto for this?

You can create custom alerters: https://github.com/Netflix/security_monkey/blob/develop/docs.... This allows you to have custom logic for items in your environment.

aws lambda with aws-sam-local for serverless apps and aws s3 and cloudfront for html/css/js frontend

For more heavier stuff I use cloudformation and to deploy docker images to ECS

The AWS-Stuff was a steep learning curve in the last months but worth it.

running npm as sudo seems to be the real problem here. why is the article not talking about this?