terrascan
A static code analyzer that detects security and compliance violations in Infrastructure as Code before provisioning cloud infrastructure.
What is terrascan?
Terrascan is a static code analyzer that scans Infrastructure as Code (IaC) files for security misconfigurations, compliance violations, and vulnerabilities. It helps developers and DevOps teams identify risks before provisioning cloud infrastructure, supporting multiple IaC providers like Terraform, Kubernetes, and CloudFormation.
DevOps engineers, cloud infrastructure teams, and security professionals who manage Infrastructure as Code and need to enforce security and compliance standards in their CI/CD pipelines.
Terrascan offers extensive policy coverage across major cloud providers and IaC formats, integrates seamlessly into CI/CD workflows, and provides customizable scanning options to fit specific security requirements.
Overview
Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.
Use Cases
Best For
- Scanning Terraform configurations for AWS security best practices
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
