Getting started with vulnerable by design Terraform project

git clone https://github.com/bridgecrewio/terragoat/cd terragoat
pip install checkov
checkov -d terraform
  • Find possible errors (like illegal instance types) for Major Cloud providers (AWS/Azure/GCP).
  • Warn about deprecated syntax, unused declarations.
  • Enforce best practices, naming conventions.
curl -s https://raw.githubusercontent.com/terraform-linters/tflint/master/install_linux.sh | bash

--

--

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store
Brenton Swanepoel

Brenton Swanepoel

Excited about OSINT, threat hunting and the general breaking of things