TFsec

TFsec is a security scanner for your Terraform code. It performs static analysis of your code and detects potential misconfigurations that could lead to security risks. It supports multiple cloud providers, such as AWS, Azure, and GCP, and has a number of built-in rules.

Usage of TFsec in Delivery Shield

• SSD now supports TFsec to scan and manage infrastructure and deployments using Terraform scripts, enhancing security compliance in Infrastructure as Code (IaC).

To Manage TFsec:

1. Navigate to Setup > Integrations.

2. In the Others panel, click TFsec.

You can use the toggle button provided below the integration tile to enable or disable it as needed.

1. The TFsec integration page is displayed. Click +New Account.

1. In the popup that appears, enter the following details:

2. Enter the Account Name, Repo URL, Repo Token, Script Absolute Path.

3. Click Save. The tool is connected.

4. You can edit the entered values by clicking the Edit option as shown below:

1. Re-enter the values and click Update.

The new values gets updated.