From c4e150aa57516aa6b7b0451d942aeb799c490736 Mon Sep 17 00:00:00 2001 From: AnaisUrlichs Date: Tue, 21 Mar 2023 09:57:32 +0000 Subject: [PATCH 1/4] README tfsec to trivy migration callout --- README.md | 17 ++++++++++++++++- 1 file changed, 16 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index cae5f7ee27..fea037b287 100644 --- a/README.md +++ b/README.md @@ -1,3 +1,5 @@ + +

@@ -10,7 +12,20 @@ [![AUR version](https://img.shields.io/aur/version/tfsec-bin)](https://aur.archlinux.org/packages/tfsec-bin) [![VScode Extension](https://img.shields.io/visual-studio-marketplace/v/tfsec.tfsec?label=vscode)](https://marketplace.visualstudio.com/items?itemName=tfsec.tfsec) -tfsec uses static analysis of your terraform code to spot potential misconfigurations. + +> 📣 All of our scanning-related efforts have moved to one place, and that is Trivy. Please look at the [migration guide](https://aquasecurity.github.io/trivy/latest/tutorials/tfsec/migration/) and the Trivy [docs](https://aquasecurity.github.io/trivy/latest/) for further information. + +## 📣 tfsec to Trivy Migration + +As part of our goal to provide a comprehensive open source security solution for all, we have been consolidating all of our scanning-related efforts in one place, and that is [Trivy](https://github.com/aquasecurity/trivy). + +Over the past year, tfsec has laid the foundations to Trivy's IaC & misconfigurations scanning capabilities, including Terraform scanning, which has been natively supported in Trivy for a long time now. + +Going forward we want to encourage the tfsec community to transition over to Trivy. Moving to Trivy gives you the same excellent Terraform scanning engine, with some extra benefits: +1. Access to more languages and features in the same tool. +2. Access to more integrations with tools and services through the rich ecosystem around Trivy. +3. Commercially supported by Aqua as well as by a the passionate Trivy community. +tfsec will continue to remain available for the time being, although our engineering attention will be directed at Trivy going forward. ## Features From c55ee979ad92a7b3ccce923ab5228bb708472216 Mon Sep 17 00:00:00 2001 From: AnaisUrlichs Date: Sun, 30 Apr 2023 11:40:48 +0100 Subject: [PATCH 2/4] fix: minor change to readme Signed-off-by: AnaisUrlichs --- README.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index fea037b287..0e362a2bae 100644 --- a/README.md +++ b/README.md @@ -27,7 +27,10 @@ Going forward we want to encourage the tfsec community to transition over to Tri 3. Commercially supported by Aqua as well as by a the passionate Trivy community. tfsec will continue to remain available for the time being, although our engineering attention will be directed at Trivy going forward. -## Features +## Overview + +tfsec uses static analysis of your terraform code to spot potential misconfigurations. +### Features - :cloud: Checks for misconfigurations across all major (and some minor) cloud providers - :no_entry: Hundreds of built-in rules From 55360c119bb693751dffc9b04b3b4e9b8b2599e7 Mon Sep 17 00:00:00 2001 From: AnaisUrlichs Date: Sun, 30 Apr 2023 11:44:45 +0100 Subject: [PATCH 3/4] fix: minor change to readme Signed-off-by: AnaisUrlichs --- README.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/README.md b/README.md index 0e362a2bae..ea191c8451 100644 --- a/README.md +++ b/README.md @@ -1,5 +1,3 @@ - -

@@ -30,6 +28,7 @@ tfsec will continue to remain available for the time being, although our enginee ## Overview tfsec uses static analysis of your terraform code to spot potential misconfigurations. + ### Features - :cloud: Checks for misconfigurations across all major (and some minor) cloud providers From 0b5a0cb924d64bfa790d1923e70ae5d7dd25f996 Mon Sep 17 00:00:00 2001 From: AnaisUrlichs Date: Mon, 15 May 2023 13:26:51 +0100 Subject: [PATCH 4/4] updating README based on changes in the docs Signed-off-by: AnaisUrlichs --- README.md | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index ea191c8451..8fa2cd0b4e 100644 --- a/README.md +++ b/README.md @@ -10,9 +10,6 @@ [![AUR version](https://img.shields.io/aur/version/tfsec-bin)](https://aur.archlinux.org/packages/tfsec-bin) [![VScode Extension](https://img.shields.io/visual-studio-marketplace/v/tfsec.tfsec?label=vscode)](https://marketplace.visualstudio.com/items?itemName=tfsec.tfsec) - -> 📣 All of our scanning-related efforts have moved to one place, and that is Trivy. Please look at the [migration guide](https://aquasecurity.github.io/trivy/latest/tutorials/tfsec/migration/) and the Trivy [docs](https://aquasecurity.github.io/trivy/latest/) for further information. - ## 📣 tfsec to Trivy Migration As part of our goal to provide a comprehensive open source security solution for all, we have been consolidating all of our scanning-related efforts in one place, and that is [Trivy](https://github.com/aquasecurity/trivy). @@ -20,13 +17,17 @@ As part of our goal to provide a comprehensive open source security solution for Over the past year, tfsec has laid the foundations to Trivy's IaC & misconfigurations scanning capabilities, including Terraform scanning, which has been natively supported in Trivy for a long time now. Going forward we want to encourage the tfsec community to transition over to Trivy. Moving to Trivy gives you the same excellent Terraform scanning engine, with some extra benefits: + 1. Access to more languages and features in the same tool. 2. Access to more integrations with tools and services through the rich ecosystem around Trivy. 3. Commercially supported by Aqua as well as by a the passionate Trivy community. tfsec will continue to remain available for the time being, although our engineering attention will be directed at Trivy going forward. -## Overview +## tfsec to Trivy migration guide +For further information on how Trivy compares to tfsec and moving from tfsec to Trivy, do have a look at the [migration guide.](https://github.com/aquasecurity/tfsec/blob/master/tfsec-to-trivy-migration-guide.md) + +## Overview tfsec uses static analysis of your terraform code to spot potential misconfigurations. ### Features