tfsec
A static analysis security scanner for Terraform code that identifies misconfigurations across major cloud providers.
What is tfsec?
tfsec is a static analysis security scanner specifically designed for Terraform infrastructure as code. It analyzes Terraform configurations to identify potential security misconfigurations and compliance violations before deployment to cloud environments. The tool helps prevent security breaches by catching issues early in the development cycle.
DevOps engineers, infrastructure developers, and security teams working with Terraform to manage cloud infrastructure across AWS, Azure, GCP, Kubernetes, and other platforms.
Developers choose tfsec for its deep Terraform-specific analysis capabilities, comprehensive multi-cloud coverage, and seamless integration into CI/CD pipelines. It provides fast, accurate security feedback directly in the development workflow.
Overview
Tfsec is now part of Trivy
Use Cases
Best For
- Scanning Terraform code for AWS security misconfigurations before deployment
- Integrating security checks into Terraform CI/CD pipelines
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
