terraform-security

Here are 12 public repositories matching this topic...

aquasecurity / tfsec

Tfsec is now part of Trivy

go aws security digitalocean devops ci azure terraform scanner linter static-analysis infrastructure-as-code compliance google-cloud-platform hacktoberfest vulnerability-scanners devsecops misconfiguration terraform-security

Updated Mar 25, 2026
Go

flatt-security / shisho

Star

Lightweight static analyzer for several programming languages

go rust security terraform static-analysis code-analysis devsecops terraform-security

Updated Aug 7, 2023
Rust

cloud-sniper / cloud-sniper

Star

Cloud Security Operations Orchestrator

cloud security-automation cloud-security security-analytics python-automation security-analyst terraform-security response-orchestration

Updated Apr 17, 2024
Python

offensive-terraform / offensive-terraform.github.io

Star

Offensive Terraform Website

docker aws azure terraform gcp offensive-security terraform-modules aws-security cloud-security azure-security gcp-security attack-modules terraform-security

Updated Oct 8, 2020
JavaScript

BIRhrt / tf-safe

Star

Secure your Terraform state — Backup, encrypt, and restore .tfstate automatically.

devops encryption terraform infrastructure-as-code devops-tools encryption-tool terraform-state terraform-cli terraform-security terraform-state-file terraform-state-backend infrastructure-as-code--iac- terraform-state-management infrastructure-as-code-security terraform-backup

Updated Nov 24, 2025
Go

ChrisAdkin8 / tf-analyze

Star

Static + plan-time Terraform security analysis with attack-graph prioritisation, MITRE ATT&CK mapping, and one-click PR fix suggestions. 215 rules, 100% fix_hcl coverage.

Updated May 13, 2026
Python

uttej-badwane / secure-cloud-prompt-engineering

Star

Security-focused prompt library and Claude Code skill for automated IaC security reviews. Covers Terraform, Kubernetes, Docker, Ansible, CloudFormation, and CI/CD pipelines. Compliance mapping to CIS, NIST 800-53, PCI-DSS, SOC2, HIPAA, and GDPR.

infrastructure-as-code security-automation devsecops cloud-security kubernetes-security terraform-security iac-security agent-skills claude-code claude-skills