Tool integration

tfsec Integration Guide

Terraform security scanner (deprecated — use Trivy)

Get a Free API Key

tfsec is deprecated and incorporated into Trivy. Migrate to trivy config for continued support.

CLI toolSARIF

Install & scan

$ go install github.com/aquasecurity/tfsec/cmd/tfsec@latest
$ tfsec . --format sarif --out tfsec.sarif

Centralise tfsec results in Vulnetix

Upload tfsec SARIF output to the Vulnetix platform to deduplicate findings, prioritise them with EPSS, CISA KEV and Coalition ESS exploit intelligence, and track remediation across every scanner in a single queue.

tfsec documentation ↗

Wire tfsec into your CI/CD pipeline →