A self-hosted private Terraform registry for modules and providers with built-in security scanning and documentation.
Tapir is a self-hosted private Terraform registry that implements the official Terraform registry protocol for modules and providers. It solves the problems of limited visibility, security risks, and inconsistent documentation in Git-based module management by providing a centralized registry with built-in scanning and documentation generation.
DevOps engineers, platform teams, and organizations using Terraform at enterprise scale who need to manage private modules and custom providers securely and efficiently.
Developers choose Tapir because it offers a fully self-hosted, protocol-compliant registry with integrated security scanning and documentation, eliminating the need for manual processes and improving module adoption and quality across teams.
A Private Terraform Registry
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Implements the official Terraform registry protocol for modules and providers, ensuring seamless compatibility with Terraform CLI without breaking existing workflows.
Uses Trivy to automatically scan module source code for vulnerabilities, providing security insights directly in the registry UI as mentioned in the README.
Generates consistent documentation with terraform-docs, displaying dependencies, inputs, outputs, and resources to improve module transparency and adoption.
Supports multiple storage adapters (S3, AzureBlob, Local) and databases (DynamoDB, Elasticsearch, CosmosDB), with Docker images and Helm charts for easy deployment.
Requires an OIDC identity provider starting from version 0.6.0, adding complexity for organizations that lack or prefer other authentication methods.
Missing native support for GCP storage and PostgreSQL databases, as admitted in the roadmap, which can be a barrier for teams using those technologies.
Actively searching for contributors per the README, indicating a smaller ecosystem with fewer third-party integrations and potentially slower feature development.