skills.rest
GuicedEE
GuicedEEOFFICIAL
Explore all skills by this author →
WebsiteGitHub

terraform-security-scanner

Scan Terraform code for secrets, misconfigurations, and compliance gaps.

5|Updated Jul 6, 2025
Search Tags:#security#compliance#secrets#terraform#vulnerabilities#iac#scanning
One-click install
npx skills add https://github.com/GuicedEE/ai-rules --skill terraform-security-scanner
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: terraform-security-scanner
Source: https://github.com/GuicedEE/ai-rules/tree/main/skills/.curated/terraform-security-scanner
Command: npx skills add https://github.com/GuicedEE/ai-rules --skill terraform-security-scanner

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Terraform code often contains secrets, misconfigurations, and compliance gaps that threaten security and reliability. This skill provides automated scanning to detect secrets, insecure configurations, and policy non-compliance across Terraform projects.

Core Features & Use Cases

  • Secrets and risk detection across Terraform codebases
  • Compliance checks including CIS benchmarks and HIPAA (via policies)
  • Automated reporting with remediation guidance and CI/CD integration

Quick Start

Run a full Terraform security scan on your codebase to detect secrets, misconfigurations, and compliance gaps.

Frequently Asked Questions about terraform-security-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Terraform code for secrets and misconfigurations?▼

Scan Terraform code for secrets and misconfigurations by analyzing cloud provider modules, variables, and multiple files to detect security issues. The scanner produces a structured report detailing severity, location, and remediation steps.

Can I run Terraform security checks for CIS Azure compliance?▼

You can run Terraform security checks for CIS Azure compliance using optional policy support. The scanner checks your infrastructure as code against compliance benchmarks to identify policy gaps and remediation steps.

Does this Terraform security scanner support CI/CD integration?▼

This Terraform security scanner supports CI/CD integration by outputting structured security reports. These reports detail detected vulnerabilities with severity and location, making them suitable for automated pipeline gates.

What is the best way to identify compliance gaps in infrastructure as code?▼

Identify compliance gaps in infrastructure as code by scanning Terraform projects across cloud environments. The scanner detects policy non-compliance and produces structured reports with specific remediation guidance.

How do Terraform security scanners handle multi-file modules and variables?▼

Terraform security scanners handle multi-file modules and variables by analyzing the full project structure across cloud providers. This comprehensive scanning approach detects secrets and insecure configurations throughout the codebase.

Related Skills

Explore More Software Engineering Skills→
LusciiLuscii

terraform-modules

Design reusable Terraform modules with standard structures and provider configurations.

Official
Advanced
GDSDNGDSDN
3

qa-security-checklist

Scan codebases for predefined vulnerability patterns and generate severity reports.

Community
Advanced
briiirussellbriiirussell
345

secrets-audit

Detect leaked credentials in repositories, Git history, and build artifacts.

Community
Advanced
andisabandisab

security-validation

Automate security scanning and policy validation for Infrastructure as Code resources.

Community
Advanced