tenable/terrascan
Some data may be outdated — see provenance labels.
Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure. observed · 2026-09-30
Health v2 · maintenance only
10/100
- Activity 45
- Release rhythm 8
- Longevity 100
Flags: archived
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.
- gap_med: n/a
- age_days: 3327
- days_rel: n/a
- days_push: 334
- n_releases_24m: 0
Adoption not part of the score
5214 stars · 554 forks observed · 2026-09-30
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded
Terrascan is a static code analyzer for Infrastructure as Code that detects compliance and security violations across Terraform, CloudFormation, ARM, Kubernetes, and Helm configurations. It offers 500+ policies for security best practices and can run locally or integrate into CI/CD pipelines.
Use cases
- scan terraform code for security misconfigurations
- detect compliance violations in infrastructure as code
- scan kubernetes yaml for security violations
- integrate iac security scanning into ci/cd pipeline
- check aws cloudformation templates for security issues
- audit helm charts for misconfigurations
- prevent insecure cloud infrastructure before provisioning
When to choose
- you need a mature, policy-rich IaC scanner with 500+ built-in policies
- you want to scan multiple IaC formats (Terraform, CFT, ARM, Kubernetes, Helm) with one tool
- you need a CLI tool that fits easily into CI/CD pipelines
When to avoid
- you need active maintenance, updates, or support - the repository is archived and no longer maintained
- you want ongoing policy updates for new cloud services
- you prefer an actively developed alternative like Checkov, tfsec, or Trivy
Facets
cli-tool · maturity abandoned
security vulnerability-scanning infrastructure-as-code cli ci-cd security cloud-computing infrastructure-as-code developer-tools windows cli go iac-scanning terraform kubernetes cloudformation helm policy-as-code devsecops compliance archived devops linux macos docker
9 sources
- readme: https://github.com/tenable/terrascan · fetched 2026-09-30 · 78e68edaabd5
- homepage: https://runterrascan.io · fetched 2026-08-29 · bb536fdd966a
- site_page: https://www.tenable.com/about-tenable/contact-tenable · fetched 2026-08-29 · 2882b0d13846
- site_page: https://www.tenable.com/about-tenable/about-us · fetched 2026-08-29 · f481a257faa5
- site_page: https://www.tenable.com/about-tenable/leadership · fetched 2026-08-29 · 16dc7728e915
- site_page: https://www.tenable.com/about-tenable/awards-and-recognitions · fetched 2026-08-29 · 1a6a63707f68
- site_page: https://www.tenable.com/about-tenable/engagement-and-inclusion · fetched 2026-08-29 · 6b9dd00c1fd4
- site_page: https://docs.tenable.com/ · fetched 2026-08-29 · 72c3d3ef60de
- site_page: https://www.tenable.com/products/tenable-one/pricing · fetched 2026-08-29 · 31ad9ac3a20e
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| tenable/terrascan | main | 10 |
For agents
markdown · JSON · MCP: product_card(name="tenable/terrascan")
Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem