defsec
defsec copied to clipboard
Trivy's misconfiguration scanning engine
This PR adds a `terraform` object to the rego state containing metadata about various Terraform internals/structures. ### Modules The `modules` attribute matches every [module block](https://developer.hashicorp.com/terraform/language/modules/syntax) in the input HCL, ex:...
Adds a provider/parser for [hashicorp/external](https://registry.terraform.io/providers/hashicorp/external/latest/docs) which can be used to execute external programs, exposing the results as values within the template. I did not introduce any associated rules, but an...