terraform-security-scan

Automate Terraform security scans for Azure by integrating this Skill as a pull request gate or pre-deployment check in Azure Pipelines or GitHub Actions. It runs static analysis with tfsec and checkov to identify vulnerabilities before deployment.

Scanning Azure Terraform configurations covers Azure CAF, CIS Azure Foundations, and TF security benchmarks. This ensures your infrastructure meets strict compliance requirements before code is merged or deployed.

Yes, you need tfsec and checkov installed in your execution environment via package managers or CI runners before running Terraform compliance checks. The Skill automates the scan execution but relies on these external tools being present.

Yes, you can use this Skill to run pre-deployment security checks for Terraform on Azure. It targets CI/CD workflows to identify misconfigurations and vulnerabilities in your infrastructure code prior to release.

The best way to check Terraform code against the CIS Azure Foundations benchmark is using checkov with the framework flag. This Skill orchestrates checkov to validate configurations against CIS standards and Azure security benchmarks.

Run static security analysis on Terraform before deploying Azure infrastructure to catch misconfigurations and vulnerabilities early. Integrating these scans into CI/CD gates prevents non-compliant code from reaching production environments.