terraform-compliance/cli

Health v2 · maintenance only

Adoption not part of the score

1461 stars · 160 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

terraform-compliance is a lightweight, security-focused BDD test framework for Terraform that enables negative testing of infrastructure-as-code. It validates Terraform plans against security and compliance policies before deployment and integrates easily into CI pipelines.

Use cases

• test terraform code for security compliance before deploy
• write BDD tests for infrastructure as code
• enforce policies like requiring S3 bucket encryption
• add terraform compliance checks to CI pipeline
• run negative tests against terraform plan output
• validate terraform code against custom security standards
• separate compliance test ownership from infrastructure code

When to choose

• you use Terraform and need free, open-source policy/compliance testing
• you want BDD-style (Given/When/Then) tests for infrastructure code
• you need pre-deploy validation in pipelines or git hooks
• you want provider-agnostic checks that work with any Terraform provider

When to avoid

• you need policy enforcement for non-Terraform IaC tools like CloudFormation or Pulumi
• you already use HashiCorp Sentinel or OPA with full policy tooling
• you need functional testing of deployed infrastructure rather than plan-level checks

Facets

cli-tool · maturity active

testing security developer-tools cli infrastructure-as-code security testing cloud-computing cli python cross-platform terraform bdd compliance infrastructure-as-code negative-testing policy-as-code ci-cd devops docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="terraform-compliance/cli")