Terrascan
Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.
Terrascan is built in Go, distributed under the Apache License 2.0, 5.2k GitHub stars, latest release v1.19.9.
When to use Terrascan
Terrascan is listed here as a Security project. The directory calls out Detects compliance violations, Security checks for infrastructure as code, Supports multiple IaC frameworks as capabilities associated with it.
Other recorded traits for Terrascan include Integrates with CI/CD pipelines.
Besides Security, this page also files Terrascan under DevOps, Development, Tools.
Terrascan compared with
Records in this directory name Checkov, Terraform Validator, CloudFormation Guard as products people compare with Terrascan. That list is editorial metadata, not a claim that Terrascan replaces each of them.
What the Terrascan stats reflect
GitHub currently shows 5.2k GitHub stars, 548 forks, latest tracked release v1.19.9. Star and activity counts here are a snapshot used as a proxy for community adoption, not a quality score.
Stats refreshed
- Language
- Go
- Latest Release
- v1.19.9
- License
- Apache License 2.0
Our Newsletter
Get new Security tools right in your inbox
Get short emails with useful security projects, releases, and repos worth watching.
Key features of Terrascan
- Detects compliance violations
- Security checks for infrastructure as code
- Supports multiple IaC frameworks
- Integrates with CI/CD pipelines
Recorded alternatives to Terrascan
Terrascan resources
Terrascan on GitHub
Frequently asked questions
What is Terrascan?
Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure. This directory highlights Detects compliance violations, Security checks for infrastructure as code, Supports multiple IaC frameworks.
Is Terrascan free to use?
Terrascan is published as open source under the Apache License 2.0. The directory lists Detects compliance violations, Security checks for infrastructure as code, Supports multiple IaC frameworks among its recorded capabilities.
What language is Terrascan written in, and what is the latest release?
Terrascan is written primarily in Go. The latest release tracked on this page is v1.19.9.
How widely is Terrascan used on GitHub?
Terrascan has about 5.2k GitHub stars. It also has about 548 forks. Those counts are a snapshot of community attention, not a ranking of quality.
What do people compare Terrascan with?
This directory records Checkov, Terraform Validator, CloudFormation Guard as comparison points for Terrascan.
More Security tools
Capa
capa is an open-source tool by the FLARE team designed for identifying capabilities in executable files, assisting analysts in reverse engineering and malware research.
Harbor
An open source trusted cloud native registry project that stores, signs, and scans content, enhancing security and reliability in managing Docker images and OCI artifacts.
Vault
A comprehensive tool for secrets management, encryption as a service, and privileged access management, providing high security and control.
Mkcert
A simple zero-config tool designed to create locally trusted development certificates for any domain, enhancing local SSL/TLS setup.
Caddy
A fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS, providing easy configuration and built-in support for modern protocols.
OpenSign
🔥 OpenSign is a free and open-source alternative to DocuSign, providing a comprehensive solution for electronic document signing.