Data

Tools

Indexes

Applications

Experiments

Summary

An open API service for producing an overview of a list of open source projects.

https://github.com/aquasecurity/tfsec

aws azure ci compliance devops devsecops digitalocean go google-cloud-platform hacktoberfest infrastructure-as-code linter misconfiguration scanner security static-analysis terraform terraform-security vulnerability-scanners

Score: 29.93198344352676

Last synced: about 8 hours ago
JSON representation

Repository metadata:

Tfsec is now part of Trivy

Owner metadata:

GitHub Events

Total
Last Year

Committers metadata

Last synced: 6 days ago

Total Commits: 1,199
Total Committers: 120
Avg Commits per committer: 9.992
Development Distribution Score (DDS): 0.675

Commits in past year: 0
Committers in past year: 0
Avg Commits per committer in past year: 0.0
Development Distribution Score (DDS) in past year: 0.0

Name Email Commits
Liam Galvin l****m@l****k 390
Owen Rumney o****n@o****k 217
Owen Rumney o****y@a****m 208
dependabot[bot] 4****] 82
vanesasejdiu 4****u 51
Owen Cummings o****s@s****m 12
simar7 1****7 10
gabrielleecredera 9****a 10
Felipe Seré f****e@g****m 9
Mads Jensen m****e@i****g 8
Stefan Linke p****x 7
Trey Tacon t****n@g****m 7
rui r****i@c****v 6
JP 4****t 6
¨Owen Rumney o****y@f****h 6
GitHub Actions Build g****s@t****v 5
Michal Franc l****c@g****m 5
Yoan Blanc y****n@d****h 5
jdesouza j****s@f****m 5
Michal Franc m****c@f****h 5
Alex Delgado a****x@g****m 4
Tomek Bielaszewski t****i@o****k 4
Brandon Daniel Bailey b****y@g****m 4
Bryan Alexander b****r@g****v 4
rdemachkovych d****h@g****m 4
Valeri Rangelov v****v@i****m 3
Oleksii Samorukov o****v@m****m 3
Fredrik Oterholt f****t@a****m 3
Albert Lloveras a****l@c****m 3
Wes Dean w****n@f****s 3
and 90 more...

Issue and Pull Request metadata

Last synced: 8 days ago

Total issues: 126
Total pull requests: 188
Average time to close issues: 7 months
Average time to close pull requests: 3 months
Total issue authors: 104
Total pull request authors: 28
Average comments per issue: 3.6
Average comments per pull request: 1.8
Merged pull request: 55
Bot issues: 0
Bot pull requests: 130

Past year issues: 0
Past year pull requests: 13
Past year average time to close issues: N/A
Past year average time to close pull requests: 3 minutes
Past year issue authors: 0
Past year pull request authors: 7
Past year average comments per issue: 0
Past year average comments per pull request: 1.31
Past year merged pull request: 0
Past year bot issues: 0
Past year bot pull requests: 6

More stats: https://issues.ecosyste.ms/repositories/lookup?url=https://github.com/aquasecurity/tfsec

Top Issue Authors

  • heriberto-mb (8)
  • armanbaghajyan (4)
  • wyardley (3)
  • Stretch96 (3)
  • yu-iskw (3)
  • tbutler-qontigo (2)
  • Jorge-Rodriguez (2)
  • Octogonapus (2)
  • JasonCubic (2)
  • userbradley (2)
  • simar7 (2)
  • dirsigler (1)
  • AlexLudwigITDienstleistungen (1)
  • bruno-novo-freshbooks (1)
  • ryan-jan (1)

Top Pull Request Authors

  • dependabot[bot] (130)
  • jdesouza (12)
  • simar7 (11)
  • mmorel-35 (4)
  • AnaisUrlichs (2)
  • PaoloFrigo (2)
  • testwill (2)
  • ddelange (2)
  • kalpanathanneeru21 (2)
  • tobydillmancbh (2)
  • ritchiemate (2)
  • japan-p (1)
  • bnicoll-oak9 (1)
  • tk3fftk (1)
  • harshad3339 (1)

Top Issue Labels

  • needs-triage (74)
  • stale (73)
  • bug (60)
  • aws (44)
  • feature (31)
  • custom-checks (29)
  • question (27)
  • azure (19)
  • google (13)
  • accepted (5)
  • good first issue (2)
  • needs-discussion (1)
  • requires-defsec-change (1)
  • advice (1)
  • help wanted (1)
  • documentation (1)
  • waiting for input (1)

Top Pull Request Labels

  • dependencies (130)
  • stale (78)
  • go (69)
  • github_actions (34)
  • docker (27)
  • documentation (2)

Package metadata

nixpkgs-24.05: tfsec

Static analysis powered security scanner for terraform code

nixpkgs-unstable: tfsec

Static analysis powered security scanner for terraform code

proxy.golang.org: github.com/aquasecurity/tfsec

  • Homepage: https://github.com/aquasecurity/tfsec
  • Documentation: https://pkg.go.dev/github.com/aquasecurity/tfsec#section-documentation
  • Licenses: MIT
  • Latest release: v1.28.14 (published over 1 year ago)
  • Last Synced: 2026-08-13T14:46:52.490Z (1 day ago)
  • Versions: 337
  • Dependent Packages: 49
  • Dependent Repositories: 53
  • Docker Downloads: 11,809,029
  • Rankings:
    • Docker downloads count: 0.417%
    • Dependent packages count: 0.706%
    • Dependent repos count: 0.792%
    • Average: 0.817%
    • Stargazers count: 0.869%
    • Forks count: 1.302%
proxy.golang.org: github.com/aquasecurity/tfsec/api

  • Homepage:
  • Documentation: https://pkg.go.dev/github.com/aquasecurity/tfsec/api#section-documentation
  • Licenses: mit
  • Latest release: v0.0.1 (published almost 6 years ago)
  • Last Synced: 2026-08-13T14:49:24.753Z (1 day ago)
  • Versions: 1
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Stargazers count: 0.762%
    • Forks count: 0.812%
    • Average: 4.48%
    • Dependent packages count: 6.999%
    • Dependent repos count: 9.346%
alpine-edge: tfsec-bash-completion

Bash completions for tfsec

  • Homepage: https://aquasecurity.github.io/tfsec
  • Status: removed
  • Licenses: MIT
  • Latest release: 1.28.4-r0 (published almost 3 years ago)
  • Last Synced: 2025-10-25T15:11:48.236Z (10 months ago)
  • Versions: 8
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Stargazers count: 2.528%
    • Forks count: 4.43%
    • Average: 5.4%
    • Dependent packages count: 14.641%
  • Maintainers (1)
alpine-edge: tfsec-zsh-completion

Zsh completions for tfsec

  • Homepage: https://aquasecurity.github.io/tfsec
  • Status: removed
  • Licenses: MIT
  • Latest release: 1.28.4-r0 (published almost 3 years ago)
  • Last Synced: 2025-10-25T15:11:48.714Z (10 months ago)
  • Versions: 8
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Stargazers count: 2.528%
    • Forks count: 4.43%
    • Average: 5.4%
    • Dependent packages count: 14.641%
  • Maintainers (1)
alpine-edge: tfsec-fish-completion

Fish completions for tfsec

  • Homepage: https://aquasecurity.github.io/tfsec
  • Status: removed
  • Licenses: MIT
  • Latest release: 1.28.4-r0 (published almost 3 years ago)
  • Last Synced: 2025-10-25T15:11:51.639Z (10 months ago)
  • Versions: 8
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Stargazers count: 2.528%
    • Forks count: 4.43%
    • Average: 5.4%
    • Dependent packages count: 14.641%
  • Maintainers (1)
alpine-edge: tfsec

Security scanner for Terraform code

  • Homepage: https://aquasecurity.github.io/tfsec
  • Status: removed
  • Licenses: MIT
  • Latest release: 1.28.4-r0 (published almost 3 years ago)
  • Last Synced: 2025-10-25T15:11:48.334Z (10 months ago)
  • Versions: 8
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Stargazers count: 2.528%
    • Forks count: 4.43%
    • Average: 5.4%
    • Dependent packages count: 14.641%
  • Maintainers (1)
formulae.brew.sh: tfsec

Static analysis security scanner for your terraform code

  • Homepage: https://aquasecurity.github.io/tfsec/latest/
  • Licenses: MIT
  • Latest release: 1.28.14 (published over 1 year ago)
  • Last Synced: 2026-08-13T14:34:53.879Z (1 day ago)
  • Versions: 38
  • Dependent Packages: 0
  • Dependent Repositories: 48
  • Downloads: 1,969 Last month
  • Rankings:
    • Downloads: 6.023%
    • Dependent repos count: 6.023%
    • Average: 10.478%
    • Dependent packages count: 19.386%
openbsd-7.9-amd64: security/tfsec

static analyzer for Terraform

  • Homepage: https://aquasecurity.github.io/tfsec
  • Licenses: mit
  • Latest release: 1.28.14 (published 4 months ago)
  • Last Synced: 2026-05-28T02:58:55.209Z (3 months ago)
  • Versions: 1
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
  • Maintainers (1)
nixpkgs-23.05: tfsec

Static analysis powered security scanner for terraform code

nixpkgs-23.11: tfsec

Static analysis powered security scanner for terraform code

nixpkgs-24.11: tfsec

Static analysis powered security scanner for terraform code

Dependencies

.github/workflows/gh_release.yml actions
  • actions/checkout v3 composite
  • actions/setup-go v3 composite
  • crazy-max/ghaction-import-gpg v5.2.0 composite
  • docker/login-action v2 composite
  • docker/setup-qemu-action v2 composite
  • goreleaser/goreleaser-action v4 composite
.github/workflows/golangci-lint.yml actions
  • actions/checkout v3 composite
  • actions/setup-go v3 composite
  • golangci/golangci-lint-action v3.3.1 composite
.github/workflows/labeler.yml actions
  • github/issue-labeler v2.5 composite
.github/workflows/mkdocs-latest.yaml actions
  • actions/checkout v3 composite
  • actions/setup-python v4 composite
.github/workflows/release.yml actions
  • actions/checkout v3 composite
  • actions/setup-go v3 composite
  • crazy-max/ghaction-import-gpg v5.2.0 composite
  • docker/login-action v2 composite
  • docker/setup-qemu-action v2 composite
  • goreleaser/goreleaser-action v4 composite
.github/workflows/snapshot-release.yml actions
  • actions/checkout v3 composite
  • actions/setup-go v3 composite
  • crazy-max/ghaction-import-gpg v5 composite
  • docker/login-action v2 composite
  • docker/setup-qemu-action v2 composite
  • goreleaser/goreleaser-action v4 composite
.github/workflows/stale.yml actions
  • actions/stale v7 composite
.github/workflows/test.yml actions
  • actions/checkout v3 composite
  • actions/setup-go v3 composite
.github/workflows/typos.yml actions
  • actions/checkout v3 composite
Dockerfile docker
  • alpine latest build
docs/Dockerfile docker
  • squidfunk/mkdocs-material 7.3.6 build
go.mod go
  • cloud.google.com/go v0.103.0
  • cloud.google.com/go/compute v1.10.0
  • cloud.google.com/go/iam v0.3.0
  • cloud.google.com/go/storage v1.23.0
  • github.com/AlecAivazis/survey/v2 v2.3.6
  • github.com/Masterminds/semver v1.5.0
  • github.com/Microsoft/go-winio v0.6.0
  • github.com/OneOfOne/xxhash v1.2.8
  • github.com/ProtonMail/go-crypto v0.0.0-20210428141323-04723f9f07d7
  • github.com/acomagu/bufpipe v1.0.3
  • github.com/agext/levenshtein v1.2.3
  • github.com/agnivade/levenshtein v1.1.1
  • github.com/alecthomas/chroma v0.10.0
  • github.com/apparentlymart/go-cidr v1.1.0
  • github.com/apparentlymart/go-textseg/v13 v13.0.0
  • github.com/aquasecurity/defsec v0.82.6
  • github.com/aquasecurity/trivy v0.34.0
  • github.com/aquasecurity/trivy-db v0.0.0-20220627104749-930461748b63
  • github.com/aws/aws-sdk-go v1.44.131
  • github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d
  • github.com/bmatcuk/doublestar v1.3.4
  • github.com/caarlos0/env/v6 v6.10.1
  • github.com/davecgh/go-spew v1.1.1
  • github.com/dlclark/regexp2 v1.4.0
  • github.com/emirpasic/gods v1.12.0
  • github.com/gdamore/encoding v1.0.0
  • github.com/gdamore/tcell/v2 v2.5.0
  • github.com/ghodss/yaml v1.0.0
  • github.com/go-git/gcfg v1.5.0
  • github.com/go-git/go-billy/v5 v5.3.1
  • github.com/go-git/go-git/v5 v5.4.2
  • github.com/gobwas/glob v0.2.3
  • github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da
  • github.com/golang/protobuf v1.5.2
  • github.com/google/go-cmp v0.5.9
  • github.com/google/go-containerregistry v0.12.0
  • github.com/google/uuid v1.3.0
  • github.com/googleapis/enterprise-certificate-proxy v0.1.0
  • github.com/googleapis/gax-go/v2 v2.5.1
  • github.com/googleapis/go-type-adapters v1.0.0
  • github.com/hashicorp/go-cleanhttp v0.5.2
  • github.com/hashicorp/go-getter v1.6.2
  • github.com/hashicorp/go-safetemp v1.0.0
  • github.com/hashicorp/go-uuid v1.0.3
  • github.com/hashicorp/go-version v1.6.0
  • github.com/hashicorp/hcl/v2 v2.14.1
  • github.com/imdario/mergo v0.3.13
  • github.com/inconshreveable/go-update v0.0.0-20160112193335-8152e7eb6ccf
  • github.com/inconshreveable/mousetrap v1.0.1
  • github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99
  • github.com/jmespath/go-jmespath v0.4.0
  • github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51
  • github.com/kevinburke/ssh_config v0.0.0-20201106050909-4977a11b4351
  • github.com/klauspost/compress v1.15.11
  • github.com/liamg/clinch v1.6.1
  • github.com/liamg/gifwrap v0.0.7
  • github.com/liamg/iamgo v0.0.9
  • github.com/liamg/jfather v0.0.7
  • github.com/liamg/memoryfs v1.5.0
  • github.com/liamg/tml v0.6.0
  • github.com/lucasb-eyer/go-colorful v1.2.0
  • github.com/mattn/go-colorable v0.1.12
  • github.com/mattn/go-isatty v0.0.14
  • github.com/mattn/go-runewidth v0.0.13
  • github.com/mgutz/ansi v0.0.0-20170206155736-9520e82c474b
  • github.com/mitchellh/go-homedir v1.1.0
  • github.com/mitchellh/go-testing-interface v1.0.0
  • github.com/mitchellh/go-wordwrap v1.0.1
  • github.com/olekukonko/tablewriter v0.0.5
  • github.com/open-policy-agent/opa v0.44.1-0.20220927105354-00e835a7cc15
  • github.com/owenrumney/go-sarif/v2 v2.1.2
  • github.com/owenrumney/squealer v1.0.1-0.20220510063705-c0be93f0edea
  • github.com/pkg/errors v0.9.1
  • github.com/pmezard/go-difflib v1.0.0
  • github.com/rcrowley/go-metrics v0.0.0-20200313005456-10cdbea86bc0
  • github.com/rivo/uniseg v0.2.0
  • github.com/sergi/go-diff v1.1.0
  • github.com/sirupsen/logrus v1.9.0
  • github.com/spdx/tools-golang v0.3.0
  • github.com/spf13/cobra v1.6.1
  • github.com/spf13/pflag v1.0.5
  • github.com/stretchr/testify v1.8.1
  • github.com/tchap/go-patricia/v2 v2.3.1
  • github.com/ulikunitz/xz v0.5.10
  • github.com/xanzy/ssh-agent v0.3.0
  • github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb
  • github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415
  • github.com/yashtewari/glob-intersection v0.1.0
  • github.com/zclconf/go-cty v1.10.0
  • github.com/zclconf/go-cty-yaml v1.0.2
  • go.opencensus.io v0.23.0
  • golang.org/x/crypto v0.1.0
  • golang.org/x/exp v0.0.0-20220823124025-807a23277127
  • golang.org/x/mod v0.6.0
  • golang.org/x/net v0.1.0
  • golang.org/x/oauth2 v0.1.0
  • golang.org/x/sys v0.1.0
  • golang.org/x/term v0.1.0
  • golang.org/x/text v0.4.0
  • golang.org/x/tools v0.2.0
  • golang.org/x/xerrors v0.0.0-20220609144429-65e65417b02f
  • google.golang.org/api v0.98.0
  • google.golang.org/appengine v1.6.7
  • google.golang.org/genproto v0.0.0-20221018160656-63c7b68cfc55
  • google.golang.org/grpc v1.50.1
  • google.golang.org/protobuf v1.28.1
  • gopkg.in/warnings.v0 v0.1.2
  • gopkg.in/yaml.v2 v2.4.0
  • gopkg.in/yaml.v3 v3.0.1
go.sum go
  • 857 dependencies
docs/requirements.txt pypi
  • mike *
  • mkdocs-include-markdown-plugin *
  • mkdocs-macros-plugin *
  • mkdocs-material *
.github/workflows/auto-close-issues.yml actions
  • actions/github-script v6 composite