TFSec
Scan Terraform for security issues with the tfsec plugin. tfsec is now part of Trivy, so new projects should use the Trivy plugin.
Plugins
Overview
tfsec scans Terraform code for security misconfigurations and risky settings. The env zero tfsec plugin runs those scans automatically during deployments, helping you catch insecure infrastructure before it's provisioned.
tfsec has been folded into Trivy and is no longer actively developed. The tfsec plugin still works for existing flows, but for new projects use the Trivy plugin instead.
How it works
Add the tfsec plugin to your deployment flow, and env zero scans your Terraform on each run. Security findings are written to the deployment logs, so problems are visible, and can gate the apply, before anything reaches your cloud.
.svg)
.svg)
