Add comments to pull requests where tfsec checks have failed

Run a security scan on your terraform with the very nice https://github.com/aquasecurity/tfsec

Run tfsec with reviewdog on pull requests to enforce security best practices

Go library for sarif - Static Analysis Results Interchange Format

GitHub Actions CI/CD - Master Template & Reusable Workflows Library - Docker Builds, AWS, Python, Terraform, Jenkins, Linting, Security Scanning, Make Builds etc.

vscode extension for tfsec

List your tfsec issues in the QuickFix window with this plugin.

An Azure DevOps Task for tfsec

Bienvenue sur ce repo ! Découvrez le ShiftLeft de Terraform avec TFSec, et plus encore !

Fast track the creation of Terraform repositories by using this simple terraform template

Learn security in Terraform code with tfsec!

Terraform workflow to be reused!

Powershell Module to install Terraform tools and some usefull aliases to use on a daily basis

zsh plugin for installing some usefull aliases for Terraform daily usage

Dockerfile that creates a useful baseline image for running some common tools for working with Amazon Web Services (AWS) and Infrastructure as Code (IaC).

Tinkering with Docker images for Terraform + tfsec, into AWS CodeBuild... Do not rely on this! 🖖

tfsec custom check rule for oci

Custom Docker Container than runs Linting & Static code analysis for Terraform

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

Useful for having liamg/tfsec and hashicorp/terraform in the same image