Tfsec is now part of Trivy
Repository Index
47,133 repositories indexed
1–3 of 3 · Most stars
A static analysis tool for security
- php
- static-code-analysis
- security-tools
- vulnerability-scanners
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
- ansible
- ansible-playbook
- devsecops
- infrastructure-as-code