search

tenable / terrascan

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.
https://runterrascan.io
Apache License 2.0
4.65k stars 495 forks source link

[Documentation Question] : iacVersion #1169

Open jb185555 opened 2 years ago

jb185555 commented 2 years ago

What are the supported values for iacVersion?

I looked through the code briefly and I found v12 and v14.

Can this tool work with terraform v1.0?

12 and 14 are actually 0.12.0 and 0.14.0.

Thanks.

vikas027 commented 2 years ago

Can this tool work with terraform v1.0?

Hey @jb185555 , I have just checked and scanned my code. It works perfectly fine with 1.1.6 :)

jb185555 commented 2 years ago

Can this tool work with terraform v1.0?

Hey @jb185555 , I have just checked and scanned my code. It works perfectly fine with 1.1.6 :)

@vikas027

I understand that you can put a different IAC version in and it will still scan the code, but for the terrascan server, what are the allowed values for this endpoint?

POST - /v1/{iac}/{iacVersion}/{cloud}/local/file/scan

I tried v1 and v1.0 for iacVersion but the response errors out. If I put v14 or v12 it scans even though I'm using 1.0.2.

Rchanger commented 2 years ago

@jb185555 you can identify the allowed IAC version by running the command terrascan scna --help. For now, the supported versions are following 

  -f, --iac-file string           path to a single IaC file
  -i, --iac-type string           iac type (arm, cft, docker, helm, k8s, kustomize, terraform, tfplan)
      --iac-version string        iac version (arm: v1, cft: v1, docker: v1, helm: v3, k8s: v1, kustomize: v2, v3, v4, terraform: v12, v13, v14, v15, tfplan: v1)
      --non-recursive             do not scan directories and modules recursively

which is nothing but 0.12,0.13,0.14. I hope this answers your question. Thank you.