tfprovidercheck

Scan Terraform providers to detect and block malicious code execution

brewmacoslinux

Try with needOr install directly

About

CLI to prevent malicious Terraform Providers from being executed

tfprovidercheck

check if a terraform provider is safe to use$ tfprovidercheck -provider aws

scan terraform configuration files for malicious providers$ tfprovidercheck -config ./terraform/

verify provider security before running terraform apply$ tfprovidercheck -provider hashicorp/aws -version 4.0.0

list all providers in your terraform project and check them$ tfprovidercheck -scan-all

validate provider against known threats database$ tfprovidercheck -validate-threat-db