Shulou(Shulou.com)05/31 Report--

This article is to share with you about what tool Terrascan is. The editor thinks it is very practical, so share it with you as a reference and follow the editor to have a look.

Terrascan

Terrascan is a powerful code compliance cross-infrastructure detection tool. Before configuring the cloud local infrastructure environment, developers can use Terrascan to detect whether there are regulatory or security violations in the target project or code, so as to reduce the security risk of the cloud infrastructure environment.

Function introduction

Provides 500 + security best practices

Support for Terraform 12 + (HCL2) scanning

Support for Kubernetes (JSON/YAML), Helm v3, and Kustomize v3 scanning

Support for AWS, Azure, GCP, Kubernetes and GitHub

Tool installation

We can find the source code corresponding to each system architecture for Terrascan on the [Releases page] of the project. In the example given below, we demonstrate how to install Terrascan:

$curl-location https://github.com/accurics/terrascan/releases/download/v1.2.0/terrascan_1.2.0_Darwin_x86_64.tar.gz-output terrascan.tar.gz$ tar-xvf terrascan.tar.gz x CHANGELOG.md x LICENSE x README.md x terrascan$ install terrascan / usr/local/bin$ terrascan

If you have installed the Go environment, we can also use the go get command to install Terrascan:

$export GO111MODULE=on$ go get-u github.com/accurics/terrascan/cmd/terrascan go: downloading github.com/accurics/terrascan v1.2.0 go: found github.com/accurics/terrascan/cmd/terrascan in github.com/accurics/terrascan v1.2.0... $terrascan is installed through brew

Users of Homebrew can also install Terrascan using the following command:

$brew install terrascanDocker installation

Terrascan can also be installed as a Docker image:

$docker run accurics/terrascanTerrascan source code build

Terrascan can also be built locally with source code. If we want to use the latest version of Terrascan or custom development of Terrascan at any time, it is recommended that you install Terrascan using source code build:

$git clone git@github.com:accurics/terrascan.git$ cd terrascan$ make build$. / bin/terrascan tool usage

To scan the code for possible security problems, we can run the following command (scan Terraform by default):

$terrascan scan

In addition, Terrascan provides the following optional commands:

$terrascanTerrascan An advanced IaC (Infrastructure-as-Code) file scanner written in Go.Secure your cloud deployments at design time.For more information, please visit https://www.accurics.com Usage: terrascan [command] Available Commands: help Help about any command init Initialize Terrascan scan Scan IaC (Infrastructure-as-Code) files for vulnerabilities. Server Run Terrascan as an API server Flags:-c,-- config-path string config file path-h,-- help help for terrascan-l,-- log-level string log level (debug, info, warn, error, panic, fatal) (default "info")-x,-- log-type string log output type (console, json) (default "console")-o,-- output-type string output type (json, yaml Xml) (default "yaml")-v,-- version version for terrascan Use "terrascan [command]-- help" for more information about a command. Thank you for reading! This is the end of this article on "what is Terrascan?". I hope the above content can be of some help to you, so that you can learn more knowledge. if you think the article is good, you can share it for more people to see!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.