BSD Ports

security/tfsec 1.28.14 OpenBSD

static analyzer for Terraform

System
OpenBSD
Repository
OpenBSD ports
Maintainer
Pavel Korovin <[email protected]>
Categories
security, lang/go

Description

tfsec uses static analysis of your Terraform code to spot potential misconfigurations.

Features: * Checks for misconfigurations across all major (and some minor) cloud providers * Hundreds of built-in rules * Scans modules (local and remote) * Evaluates HCL expressions as well as literal values * Evaluates Terraform functions e.g. concat() * Evaluates relationships between Terraform resources * Compatible with the Terraform CDK * Applies (and embellishes) user-defined Rego policies * Supports multiple output formats: lovely (default), JSON, SARIF, CSV, CheckStyle, JUnit, text, Gif. * Configurable (via CLI flags and/or config file) * Very fast, capable of quickly scanning huge repositories * Plugins for popular IDEs available (JetBrains, VSCode and Vim) * Community-driven - come and chat with us on Slack!

Install

Binary package:

pkg_add tfsec

From the ports tree:

cd /usr/ports/security/tfsec && make install

Dependencies

Build dependencies 1

No port depends on this one.