Tfsec

This plugin allows you to scan the Terraform code with tfsec and provide output.

tfsec is a static analysis security scanner for your Terraform code.

• Home page

• Source code on GitHub

Configuration options

1. Name: This is a Brainboard field to describe what this task is about.

2. Disable grouping: Disable grouping of similar results.

3. Ignore failure: This will put the task in a non-blocking failure, which means the execution of the following stage will be triggered even if the task fails.

4. Include ignored: Include ignored checks in the result output.

5. Include passed: Include passed checks in the result output.

6. Require approval: It implies that this task will not be executed until approved by people added in the approvers' list.

   • The task remains blocked until all approvers added in the list approve it.

   • When enabled, it allows you to add approvers to the list

   • The approver has to be a Brainboard user.

7. Minimum severity: You can specify the minimum severity of result that should be reported. By default, every severity is reported. You must use one of CRITICAL, HIGH, MEDIUM, LOW.

8. Disabled checks: comma-separated list of checks to exclude during the execution.

   1. This list has to be in this format: rule1,rule2,rule3...

   2. No space should be added after the comma in the list.

Sample output

The output includes clickable links that open the relevant documentation pages listed in the 'More Information' section.