static analyzer for Terraform
Project homepage: https://aquasecurity.github.io/tfsec
Description
tfsec uses static analysis of your Terraform code to spot potential
misconfigurations.
Features:
* Checks for misconfigurations across all major (and some minor) cloud providers
* Hundreds of built-in rules
* Scans modules (local and remote)
* Evaluates HCL expressions as well as literal values
* Evaluates Terraform functions e.g. concat()
* Evaluates relationships between Terraform resources
* Compatible with the Terraform CDK
* Applies (and embellishes) user-defined Rego policies
* Supports multiple output formats: lovely (default), JSON, SARIF, CSV,
CheckStyle, JUnit, text, Gif.
* Configurable (via CLI flags and/or config file)
* Very fast, capable of quickly scanning huge repositories
* Plugins for popular IDEs available (JetBrains, VSCode and Vim)
* Community-driven - come and chat with us on Slack!
Package information
- Ports path
- security/tfsec
- Package architecture
- amd64
- Maintainer
- Pavel Korovin <pvk@openbsd.org>
- Categories
- security, lang/go
- Available flavors
- None listed
- Only for architectures
- aarch64, amd64, arm, i386, riscv64
Ports list build and test dependencies as well as runtime dependencies. pkg_add selects those needed for installation.