Using tfsec and Jenkins to Secure Your Terraform Code

Показать описание

Need help with your Jenkins questions?

Timecodes ⏱:

00:00 Introduction
00:10 Overview
00:29 Starting point
01:01 Review tfsec documentation
01:33 Review sample repository
03:24 Create job
06:04 Run job again
07:01 Why use a static analysis scanner for your Terraform code?

#jenkinstutorial #tfsec #terraform

Information referenced in this video:

Sample repository:

Jenkins LTS 2.289.3

CloudBees on Twitter:

Darin on Twitter:

Рекомендации по теме

Комментарии

How to show a report of this terraform script scan result on Jenkins, like we display report of build using Junit

mohammadraghib

Hello, thank you for the video!
I am using tfsec in Jenkins by pulling docker image but when I run the command (docker run --rm -v "$WORKSPACE/:/src" aquasec/tfsec:latest /src) it succeeds but says there are no problems found, meanwhile if I run the same command locally it finds problems!! Also the path of tf files is correct. Do you think of any possible solution? Thanks in advance.

vehbirestelica

Does that help passing sensitive variables on Terraform Apply? I never understood how you do that without vars file.

jampietri

Using tfsec and Jenkins to Secure Your Terraform Code

Using tfsec and Jenkins to Secure Your Terraform Code

How to integrate Jenkins with Tfsec

Using TFsec and Spacelift to Secure Terraform Code

Secure your Terraform CI/CD Pipelines with tfsec

Using tfsec to scan Terraform Code || tfsec with GitHub Actions

Part2 - Ensuring Terraform Code Standards and Security with flint and Tfsec in GitHub Actions

Introduction to the tfsec extension for Visual Studio Code

Using tfsec to Scan Your Terraform Code

Using tfsec with GitHub Actions

Structura.IO - Introducing TFSec Integration

How to run security scan on Terraform Code with tfscan

Identifying Misconfigurations in your Terraform

How to Read a Properties File Using Jenkins

How to Run a Terraform Script in Jenkins

Terraform automation with azure devops in english CICD tfsec, tflint, cost estimation #devops

Deploying Terraform Enterprise in a Highly Secure Environment at Morgan Stanley

Using Checkov with Terraform and Azure DevOps

How to Use Aqua to Manage Tools for Jenkins Agents

Terraform Security Using Checkov | Scan Terraform Templates

Terraform & Jenkins Configuration in AWS

Setting up Terraform guardrails with OPA and TFSEC

Day 24 - Static analysis of Terraform code for Azure resources with Dushyant Priyadarshee

How to Integrate Liquibase With Jenkins

Terraform automation with azure devops in hindi CICD tfsec, tflint, cost estimation #devopstutorial