# Terrascan

This plugin allows you to scan the Terraform code with `Terrascan` and provide output.

`Terrascan` is a static code analyzer for Infrastructure as Code.

It provides 500+ out-of-the-box policies so that you can scan IaC against common policy standards such as the CIS Benchmark.

* [Home page](https://runterrascan.io/)
* [Source code on Github](https://github.com/tenable/terrascan)

<figure><img src="https://2733077811-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7YhVIZuz5Brv8kisTlFL%2Fuploads%2FpOq0mVP30NM0eyKZbVlw%2FCleanShot%202025-07-10%20at%2013.48.40%402x.png?alt=media&#x26;token=85cecb1c-89d3-40f5-969a-91c7f8c227f0" alt=""><figcaption></figcaption></figure>

**Configuration options**

1. Name: This is Brainboard field to describe what this task is about.
2. Version: always points to the latest version.
3. Extra environment variables: variables that you can define here that will be used as environment variables in the execution shell.
4. Scan rules: specify rules to scan, example: –scan-rules=“ruleID1,ruleID2”.
5. Skip rules: specify one or more rules to skip while scanning:
   1. Example: –skip-rules=“ruleID1,ruleID2”
   2. No space is added after the comma in the list
6. Ignore failure: this will put the task in a non-blocking failure, which means, the execution of the following stage will be triggered even if the task fails.
7. Require approval: means that this task will not be executed until approved by people added in the approvers' list.
   * The task remains blocked until all approvers added in the list approve it.
   * When enabled, it allows you to add approvers to the list<br>

     <figure><img src="https://2733077811-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7YhVIZuz5Brv8kisTlFL%2Fuploads%2FZKgvnPvOoj5vM7zhSMGV%2FCleanShot%202025-07-10%20at%2013.25.53%402x.png?alt=media&#x26;token=c0edd24a-3b3c-4062-b4fa-45852a04615c" alt=""><figcaption></figcaption></figure>
   * The approver has to be Brainboard user
8. Show passed: display passed rules, along with violations.

**Sample output**

<figure><img src="https://2733077811-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7YhVIZuz5Brv8kisTlFL%2Fuploads%2F5ih44YHDG9QXFT2TrZir%2FCleanShot%202025-07-10%20at%2013.55.26%402x.png?alt=media&#x26;token=3eef5f09-741f-4614-afb1-d1b874650987" alt=""><figcaption></figcaption></figure>
