tfsec

tfsec is a tool that detects potential configuration errors by performing static analysis on the Terraform code. Project development activities have been consolidated within Trivy, encouraging users to switch to Trivy. Through its built-in library of rules, it can scan security risks in cloud providers.

TF

aquasecurity · GitOps & Infrastructure as Code

STARS7.1K
FORKS560
COMMITS0
CONTRIBUTORS0
VERSIONv1.28.14
UPDATED7 mo ago
GoTerraformStatic AnalysisSecurityMIT

Common commercial products in this category: HCP Terraform, Spacelift, env0

What can it do?
  • You detect potential configuration errors in your Terraform code with static analysis.
  • Using established rules, you scan large warehouses quickly.
  • You report analysis results using multiple output formats.

My note

Alternative pages

More in: GitOps & Infrastructure as Code