Skip to content

Commit d7063ef

Browse files
authored
docs: README tfsec to trivy migration callout (#2020)
* README tfsec to trivy migration callout * fix: minor change to readme Signed-off-by: AnaisUrlichs <[email protected]> * fix: minor change to readme Signed-off-by: AnaisUrlichs <[email protected]> * updating README based on changes in the docs Signed-off-by: AnaisUrlichs <[email protected]> --------- Signed-off-by: AnaisUrlichs <[email protected]>
1 parent 39a6d2e commit d7063ef

File tree

1 file changed

+19
-1
lines changed

1 file changed

+19
-1
lines changed

README.md

+19-1
Original file line numberDiff line numberDiff line change
@@ -10,9 +10,27 @@
1010
[![AUR version](https://img.shields.io/aur/version/tfsec-bin)](https://aur.archlinux.org/packages/tfsec-bin)
1111
[![VScode Extension](https://img.shields.io/visual-studio-marketplace/v/tfsec.tfsec?label=vscode)](https://marketplace.visualstudio.com/items?itemName=tfsec.tfsec)
1212

13+
## 📣 tfsec to Trivy Migration
14+
15+
As part of our goal to provide a comprehensive open source security solution for all, we have been consolidating all of our scanning-related efforts in one place, and that is [Trivy](https://github.com/aquasecurity/trivy).
16+
17+
Over the past year, tfsec has laid the foundations to Trivy's IaC & misconfigurations scanning capabilities, including Terraform scanning, which has been natively supported in Trivy for a long time now.
18+
19+
Going forward we want to encourage the tfsec community to transition over to Trivy. Moving to Trivy gives you the same excellent Terraform scanning engine, with some extra benefits:
20+
21+
1. Access to more languages and features in the same tool.
22+
2. Access to more integrations with tools and services through the rich ecosystem around Trivy.
23+
3. Commercially supported by Aqua as well as by a the passionate Trivy community.
24+
tfsec will continue to remain available for the time being, although our engineering attention will be directed at Trivy going forward.
25+
26+
## tfsec to Trivy migration guide
27+
28+
For further information on how Trivy compares to tfsec and moving from tfsec to Trivy, do have a look at the [migration guide.](https://github.com/aquasecurity/tfsec/blob/master/tfsec-to-trivy-migration-guide.md)
29+
30+
## Overview
1331
tfsec uses static analysis of your terraform code to spot potential misconfigurations.
1432

15-
## Features
33+
### Features
1634

1735
- :cloud: Checks for misconfigurations across all major (and some minor) cloud providers
1836
- :no_entry: Hundreds of built-in rules

0 commit comments

Comments
 (0)