terrascan

Collection of security and best practice test for static code analysis of terraform templates.

This is terrascan wrapper.

Requirements

• Docker

Usage

Test

docker run --rm -v "$PWD:/work" tmknom/terrascan --location . --test all

Help

 docker run --rm tmknom/terrascan

Makefile targets

build                          Build docker image
format                         Format code
help                           Show help
install                        Install requirements
lint                           Lint code
release                        Release

Development

Installation

git clone git@github.com:tmknom/terrascan.git
cd terrascan
make install

Deployment

1. Bump VERSION file.
2. Run make release.
3. Automatically deployed by "Docker Hub Automated Build".

Deployment Pipeline

1. GitHub - Version Control System
   • https://github.com/tmknom/terrascan
2. GitHub Actions - Continuous Integration
   • https://github.com/tmknom/terrascan/actions
3. Docker Hub - Docker Registry
   • https://hub.docker.com/r/tmknom/terrascan
4. MicroBadger - Docker Inspection
   • https://microbadger.com/images/tmknom/terrascan

License

Apache 2 Licensed. See LICENSE for full details.