feat(trivy): Add terraform_trivy hook and deprecate terraform_tfsec (#606)

This commit is contained in:
Arnau Llamas 2023-12-15 15:54:13 +01:00 committed by GitHub
commit f3c819a747
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
6 changed files with 152 additions and 4 deletions

View file

@ -86,13 +86,21 @@
exclude: \.terraform\/.*$
- id: terraform_tfsec
name: Terraform validate with tfsec
name: Terraform validate with tfsec (deprecated, use "terraform_trivy")
description: Static analysis of Terraform templates to spot potential security issues.
require_serial: true
entry: hooks/terraform_tfsec.sh
files: \.tf(vars)?$
language: script
- id: terraform_trivy
name: Terraform validate with trivy
description: Static analysis of Terraform templates to spot potential security issues.
require_serial: true
entry: hooks/terraform_trivy.sh
files: \.tf(vars)?$
language: script
- id: checkov
name: checkov (deprecated, use "terraform_checkov")
description: Runs checkov on Terraform templates.