tfsec
brew install tfsec
v1.28.14
MIT
Static analysis security scanner for Terraform code, written in Go.
Why you might care
Scans Terraform files for misconfigurations, compliance violations, and security best practices before deployment. Integrates into CI/CD pipelines and pre-commit hooks to catch infrastructure-as-code issues early. Faster single-binary alternative to manual code review or heavier policy-as-code frameworks.
1.8k
30-day installs · #1022
8.0k
90-day · #902
32.8k
365-day · #843
Build dependencies
Links
- https://aquasecurity.github.io/tfsec/latest/
- Brew formula source: Formula/t/tfsec.rb
Blurb generated by claude-haiku-4-5 on today.
Raw metadata
{
"aliases": [],
"alternatives": [
"checkov",
"terraform-compliance",
"snyk",
"tflint"
],
"build_dependencies": [
"go"
],
"categories": [
"linter",
"scanner",
"security"
],
"caveats": null,
"conflicts_with": [],
"dependencies": [],
"deprecated": 0,
"deprecation_reason": null,
"desc": "Static analysis security scanner for your terraform code",
"disable_reason": null,
"disabled": 0,
"enrichment_fetched_at": "2026-06-20T23:41:16+00:00",
"first_seen": "2026-06-20T23:34:18+00:00",
"full_name": "tfsec",
"github_default_branch": null,
"github_last_commit_at": null,
"github_readme_excerpt": null,
"github_repo": null,
"github_stars": null,
"github_topics": [],
"homepage": "https://aquasecurity.github.io/tfsec/latest/",
"homepage_og_description": null,
"homepage_og_image": null,
"homepage_title": "tfsec",
"installs_30d": 1820,
"installs_365d": 32823,
"installs_90d": 8036,
"keg_only": 0,
"keg_only_reason": null,
"last_seen": "2026-06-20T23:34:18+00:00",
"license": "MIT",
"llm_generated_at": "2026-06-20T23:48:28+00:00",
"llm_model": "claude-haiku-4-5",
"name": "tfsec",
"oldnames": [],
"one_liner": "Static analysis security scanner for Terraform code, written in Go.",
"optional_dependencies": [],
"rank_30d": 1022,
"rank_365d": 843,
"rank_90d": 902,
"raw_hash": "6bb214293f61cc29",
"recommended_dependencies": [],
"revision": 0,
"ruby_source_path": "Formula/t/tfsec.rb",
"tap": "homebrew/core",
"test_dependencies": [],
"uses_from_macos": [],
"version_head": "HEAD",
"version_stable": "1.28.14",
"versioned_formulae": [],
"why_use_this": "Scans Terraform files for misconfigurations, compliance violations, and security best practices before deployment. Integrates into CI/CD pipelines and pre-commit hooks to catch infrastructure-as-code issues early. Faster single-binary alternative to manual code review or heavier policy-as-code frameworks."
}