ogulcanaydogan/iac-scanner

•Updated 7 months ago

Infrastructure as Code security scanner (Terraform, CloudFormation, K8s)

Image

1.2K

ogulcanaydogan/iac-scanner repository overview

⁠IaC Scanner

Security scanner for Infrastructure as Code. Scans Terraform, CloudFormation, Kubernetes manifests, Dockerfiles, and Helm charts.

⁠Quick Start

docker run -v $(pwd):/code ogulcanaydogan/iac-scanner

⁠Features

Scans Terraform, CloudFormation, Kubernetes, Dockerfiles, Helm
Multiple output formats (CLI, JSON, SARIF, JUnit XML)
Configurable severity thresholds
Skip specific checks
CI/CD friendly (non-zero exit on findings)

⁠Environment Variables

Variable	Description	Default
`SCAN_DIR`	Directory to scan	`/code`
`OUTPUT_FORMAT`	Output format (cli/json/sarif/junitxml)	`cli`
`OUTPUT_FILE`	Write output to file	-
`SEVERITY`	Minimum severity (LOW/MEDIUM/HIGH/CRITICAL)	`LOW`
`SKIP_CHECKS`	Comma-separated check IDs to skip	-
`FRAMEWORK`	Framework (terraform/cloudformation/kubernetes/dockerfile/all)	`all`
`COMPACT`	Compact output	`false`

⁠Docker Compose Example

services:
  scan:
    image: ogulcanaydogan/iac-scanner
    volumes:
      - ./terraform:/code
    environment:
      - FRAMEWORK=terraform
      - SEVERITY=MEDIUM
      - OUTPUT_FORMAT=json
      - OUTPUT_FILE=/code/scan-results.json

⁠CI/CD Usage

# GitHub Actions
- name: IaC Security Scan
  run: |
    docker run --rm -v ${{ github.workspace }}:/code \
      -e SEVERITY=HIGH \
      -e OUTPUT_FORMAT=sarif \
      ogulcanaydogan/iac-scanner

⁠License

MIT

Tag summary

Recent tags

Content type

Image

Digest

sha256:189693007…

Size

142 MB

Last updated

7 months ago

docker pull ogulcanaydogan/iac-scanner