Back to feed
Dev.to
Dev.to
6/16/2026
I built a Terraform security scanner that lives inside GitHub PRs

I built a Terraform security scanner that lives inside GitHub PRs

Short summary

TerraWatch is a GitHub App scanning Terraform PRs for security issues—public S3 buckets, IAM wildcards, open ports—with inline fix suggestions. Lightweight, no YAML config needed, all changes reviewed before merge; free beta available starting today.

  • •Catches infrastructure-as-code security misconfigurations in pull requests automatically
  • •Requires 2-minute GitHub App install with no CI config or webhook setup needed
  • •29 security rules with hardcoded diffs developers review before merge; free beta launching today

Generated with AI, which can make mistakes.

#product-launch#ai-tools
Read full article at Dev.to

Is this a good recommendation for you?

Comments

Failed to load comments. Please try again.

Explore more

Your Infrastructure Has Bugs Too: Scanning Terraform with Checkov (IaC SAST)
Dev.to
The original title is "Securing Your Terraform Infrastructure with Checkov and GitHub Actions" which is 9 words. Let me check the rules:
Dev.to
The original title is "Applying SAST to Infrastructure as Code: Scanning Terraform with Checkov"
Dev.to
Free GitHub App Automatically Detects AI and Cloud Security Mistakes
Dev.to