TFSec
A static analysis security scanner for Terraform code that identifies misconfigurations across major cloud providers.
What is TFSec?
tfsec is a static analysis security scanner for Terraform code that identifies potential misconfigurations and security vulnerabilities across major cloud providers. It analyzes Terraform configurations to detect security risks before infrastructure is deployed, helping prevent cloud security breaches and compliance violations.
DevOps engineers, infrastructure developers, and security teams working with Terraform to manage cloud infrastructure across AWS, Azure, GCP, Kubernetes, and other platforms.
Developers choose tfsec for its specialized focus on Terraform security, comprehensive multi-cloud coverage, fast scanning performance, and seamless integration into CI/CD pipelines and development workflows through IDE plugins.
Overview
Tfsec is now part of Trivy
Use Cases
Best For
- Scanning Terraform code for security misconfigurations before deployment
- Integrating security checks into CI/CD pipelines for infrastructure as code
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
