> For the complete documentation index, see [llms.txt](https://docs.brainboard.co/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.brainboard.co/automation/supported-plugins/security/terrascan.md).

# Terrascan

This plugin allows you to scan the Terraform code with <mark style="color:$primary;">**`Terrascan`**</mark> and provide output.

{% hint style="info" %} <mark style="color:$primary;">**`Terrascan`**</mark> is a static code analyzer for **Infrastructure as Code.**

It provides **500+ out**-of-the-box policies so that you can scan **IaC** against common policy standards such as the **CIS Benchmark.**
{% endhint %}

* [Home page](https://runterrascan.io/)
* [Source code on Github](https://github.com/tenable/terrascan)

<figure><img src="https://2733077811-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7YhVIZuz5Brv8kisTlFL%2Fuploads%2FK36vNmjJ2kpecPJZ6gzi%2Fterrascan.png?alt=media&amp;token=68cdc24b-71a2-42ed-9265-4308dbe0009f" alt=""><figcaption></figcaption></figure>

**Configuration options**

1. **Name:** This is a <mark style="color:$primary;">**Brainboard**</mark> field to describe what this task is about.
2. **Scan rules:** Specify rules to scan, example: -**scan-rules**=<mark style="color:$primary;">**`“ruleID1,ruleID2”`**</mark>.
3. **Skip rules:** specify one or more rules to skip while scanning:
   1. Example: **–skip-rules**=<mark style="color:$primary;">**“ruleID1,ruleID2”**</mark>
   2. No space should be added after the comma in the list.
4. **Ignore failure:** this will put the task in a non-blocking failure, which means, the execution of the following stage will be triggered even if the task fails.
5. **Require approval:** It means that this task will not be executed until approved by people added to the approvers' list.
   * The task remains blocked until all approvers added in the list approve it.
   * When enabled, it allows you to add approvers to the list.
   * The approver has to be a <mark style="color:$primary;">**Brainboard**</mark> user.
6. **Show passed:** Display passed rules, along with violations.

**Sample output**

<figure><img src="https://2733077811-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7YhVIZuz5Brv8kisTlFL%2Fuploads%2F5ih44YHDG9QXFT2TrZir%2FCleanShot%202025-07-10%20at%2013.55.26%402x.png?alt=media&amp;token=3eef5f09-741f-4614-afb1-d1b874650987" alt=""><figcaption></figcaption></figure>
