README
¶
Steward
Multi-cloud resource inventory, dependency visualization, and reviewed cleanup.
Website · Documentation · Tutorial
English / 简体中文
Steward by LoomX is an open-source tool for multi-cloud resource inventory, dependency visualization, and reviewed cleanup. It brings AWS, Alibaba Cloud, Google Cloud, and Microsoft Azure into one interface, so you can see what is running and review what a cleanup would affect.
Get started in your browser with Steward Cloud, or install Steward to run it yourself.
https://github.com/user-attachments/assets/06459e30-90d9-4e3a-82c5-e12f64e55939
What Steward does
- Cloud inventory. Discover what is running across your cloud accounts and find the resources that need attention.
- Resource relationships. Explore how resources connect and understand shared dependencies before making changes.
- Scheduled scans. Keep the inventory current on a schedule, see which resources each scan added, removed or modified, and hear about failed scans in Slack, Feishu, DingTalk or WeCom.
- Reviewed cleanup. Review the impact before execution, then follow the results of each cleanup.
Getting started & documentation
Learn the concepts in What is Steward?, then follow the quick start or work through your first resource inventory.
The documentation covers cloud connections, inventory, relationships, cleanup, and deployment.
Try a focused workflow: inventory AWS resources across regions or review cloud dependencies before cleanup.
Developing Steward
This repository contains the Steward service, web console, and cloud provider integrations. Contributions are welcome:
License
Apache License 2.0 · Copyright 2026 LoomX
Directories
¶
| Path | Synopsis |
|---|---|
|
cmd
|
|
|
cataloggen
command
|
|
|
steward
command
|
|
|
internal
|
|
|
app/notification
Package notification delivers scheduled-scan events to chat tools and webhooks that the workspace configures.
|
Package notification delivers scheduled-scan events to chat tools and webhooks that the workspace configures. |
|
app/scheduling
Package scheduling runs recurring scans: it starts scans at their planned times, applies each schedule's rules and keeps scan history bounded.
|
Package scheduling runs recurring scans: it starts scans at their planned times, applies each schedule's rules and keeps scan history bounded. |
|
checkpoint
Package checkpoint asks the LoomX checkpoint service whether a newer Steward release exists and whether a security bulletin applies to this build.
|
Package checkpoint asks the LoomX checkpoint service whether a newer Steward release exists and whether a security bulletin applies to this build. |
|
core/schedule
Package schedule describes recurring scans: when they run, what they cover and how each planned run turned out.
|
Package schedule describes recurring scans: when they run, what they cover and how each planned run turned out. |
|
credential/oauth
Package oauth runs the provider-neutral half of a browser authorization: the loopback callback, PKCE, flow ownership and expiry, and the refresh loop that keeps a stored authorization usable.
|
Package oauth runs the provider-neutral half of a browser authorization: the loopback callback, PKCE, flow ownership and expiry, and the refresh loop that keeps a stored authorization usable. |
|
datadir
Package datadir resolves where Steward keeps its local database, credential key, and server status file.
|
Package datadir resolves where Steward keeps its local database, credential key, and server status file. |
|
idgen
Package idgen generates opaque entity identifiers owned by Steward.
|
Package idgen generates opaque entity identifiers owned by Steward. |
|
update
Package update upgrades Steward through the channel that installed it.
|
Package update upgrades Steward through the channel that installed it. |
|
workloadidentity
Package workloadidentity implements server-issued OIDC workload identities.
|
Package workloadidentity implements server-issued OIDC workload identities. |
|
providers
|
|