Tfsec is now part of Trivy
Lightweight static analyzer for several programming languages
Cloud Security Operations Orchestrator
Offensive Terraform Website
Secure your Terraform state — Backup, encrypt, and restore .tfstate automatically.
Local-first IaC auditor that fuses cost and security in a single pass — and writes the fix, not just the flag.
Static + plan-time Terraform security analysis with attack-graph prioritisation, MITRE ATT&CK mapping, and one-click PR fix suggestions. 215 rules, 100% fix_hcl coverage.
Security-focused prompt library and Claude Code skill for automated IaC security reviews. Covers Terraform, Kubernetes, Docker, Ansible, CloudFormation, and CI/CD pipelines. Compliance mapping to CIS, NIST 800-53, PCI-DSS, SOC2, HIPAA, and GDPR.
Local safety guardrails for AI-assisted AWS infrastructure work
8 款生产级 AI Agent Skill：持久记忆、代码安全评审、自然语言数据分析、调试复现、测试生成、IaC 安全扫描、性能诊断、文档生成 | 8 production-ready agent skills (memory, code-review security, NL data analysis, agentic debugger, testforge, iac-guard, perf-doctor, docsmith). Pure Python stdlib, zero dependencies.
Scans Terraform and CloudFormation IaC for IAM privilege escalation risks on every pull request
Dependency-free CLI that audits a repository for leaked secrets, risky GitHub Actions workflows, and insecure configuration.
enterprise-devsecops-platform
Evidence-backed cybersecurity portfolio: SOC, Wazuh SIEM, detection engineering, DFIR, Windows/AD, network and cloud security.
Homebrew tap for KloudSec CLI - Cloud Security Suite
A Terraform static analysis tool that enforces RBI cybersecurity and DPDPA compliance by detecting India-specific infrastructure misconfigurations in CI/CD pipelines. Run it in your pipeline to detect critical/high violations early and fail builds when policy is not met.
Reusable Terraform CI/CD pipeline template for Azure DevOps with integrated IaC security checks (Checkov) and vulnerability scanning (Trivy).
Safe, reproducible misconfigured resource creator using terraform scenarios for testing cloud-security detections in disposable cloud environments.
Terraform module for the Just In Time implementation for Google Cloud.
Deterministic IAM security gate — OPA/Rego deny-sets over normalized Terraform plans, enforced in CI
To associate your repository with the terraform-security topic, visit your repo's landing page and select "manage topics."