Trivy Terraform Plan Misconfiguration Scanning -- tfplan.json

In this video, I am showing you Trivy for terraform misconfiguration scanning, including the new feature of scanning terraform plan outputs for misconfiguration.

Terraform plan scanning documentation: https://aquasecurity.github.io/trivy/...
Trivy Misconfiguration scanning https://aquasecurity.github.io/trivy/...

Resources 📚
The documentation for misconfiguration scanning: https://aquasecurity.github.io/trivy/...
The documentation for filtering outputs: https://aquasecurity.github.io/trivy/...
The demo application I have used: https://github.com/Cloud-Native-Secur...
The projects are available on GitHub: https://github.com/aquasecurity
Join our Slack community: https://slack.aquasec.com

⭐Give our projects a star on GitHub⭐
https://github.com/aquasecurity/trivy

Timestamps:
00:00 - Intro
00:46 - tfsec to Trivy migration
01:43 - Documentation and installing Trivy
02:24 - Types of Terraform misconfiguration scanning
04:04 - Ignoring security issues reported e.g. trivyignore
05:55 - Scanning Terraform plan file
08:06 - Passing Rego policies
10:35 - Outro