Integrate Terrascan with Vulnetix. Scan Terraform, CloudFormation, Kubernetes, Helm, and Dockerfiles.
CLI toolSARIF
Install & scan
$ # Download from https://github.com/tenable/terrascan/releases $ terrascan scan -d . -i terraform -o sarif
Run Terrascan in CI
Scan on every push and upload the results to Vulnetix:
- name: Install Terrascan
run: |
curl -L $(curl -s https://api.github.com/repos/tenable/terrascan/releases/latest | grep -o 'https://.*Linux_x86_64.tar.gz') | tar xz terrascan
sudo mv terrascan /usr/local/bin/
- name: Run Terrascan
run: terrascan scan -d . -i terraform -o sarif > terrascan.sarif
- name: Upload to Vulnetix
run: vulnetix upload --file terrascan.sarif
Centralise Terrascan results in Vulnetix
Upload Terrascan SARIF output to the Vulnetix platform to deduplicate findings, prioritise them with EPSS, CISA KEV and Coalition ESS exploit intelligence, and track remediation across every scanner in a single queue.