iac

Hi there,

I'd like to use trivy on arm64 Ubuntu 20.04 (running on a Raspberry Pi). Would it be possible to publish arm64 .deb packages in the trivy apt repository?

Thanks,
Thilo

• terrascan version: 1.9.0
• terraform version: 1.0.1

Enhancement Request

Other security scanning tools (e.g. checkov and tfsec) have a --soft-fail flag or equivalent option that allows you to always exit with 0 status.

Extremely useful when running the tool without halting a pipeline for example.

I currently use a workaround, but something more concrete would be very desira

Description

We all have an aws_api_gateway_account resource inside each region of AWS that will by default output as unmanaged. We s

Add error handling during credentials onChange event so that the Scan Account feature does not activate if credentials are invalid

$ terratag -tags=var.default_tags
2020/09/24 23:09:46 Processing file cluster/ecs.tf
panic: invalid character 'v' looking for beginning of value

Because having to type the whole commands is a pain!

We avoid automation that changes the source tree without human feedback but this seems to be the model that yor currently uses (e.g. the GitHub action that adds tags to all the things and then commits them to the branch).

In our workflow (we do this with terraform fmt and black for python) we expect the branch as it is committed/pushed by the user to be correct and we have tests that run to

We should add support for other types of virtual networks like:

• Routed
• Open
• Isolated

In my ubuntu 20.04.2.0, i have python 2.7.18 and pip3 20.0.2.
I was trying to install prancer-basic via pip3 install prancer-basic
It get installed successfully with below warning:

WARNING: The scripts populate_json, prancer, register_key_in_azure_vault, terraform_to_json and validator are installed in '/home/r4redu/.local/bin' which is not on PATH.
  Consider adding this director

Some inputs and outputs have a vague description, making it hard for the user to understand, what they are used for. E.g. the description of workspaceId does not explain, that it is used for diagnostic settings.

All descriptions for inputs and outputs should be scanned and if necessary adapted. Also the name of the parameter should be questioned and if necessary adapted to a more intuitive nam