TerraSecure Security Scanner
Version updated for https://github.com/JashwanthMU/TerraSecure to version v2.0.0.
- This action is used across all versions by ? repositories.
Action Type
This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
Action Summary
TerraSecure is an AI-powered security scanner designed to detect misconfigurations in Terraform and Infrastructure-as-Code (IaC) with high accuracy (92%) and low false positives (<11%). It automates security analysis by leveraging machine learning to identify vulnerabilities, provide business impact insights, and suggest remediation steps. Key capabilities include fast scanning of large infrastructures, offline functionality, multi-format reporting (e.g., SARIF for GitHub Security), and integration with CI/CD pipelines via GitHub Actions or Docker.
Release notes
TerraSecure v2.0.0 - production release
ML-Powered Security Scanner for Terraform & IaC
what’s new:
TerraSecure combines machine learning with AI-enhanced analysis to detect infrastructure security issues before they become breaches.
key features:
- ML-Powered Detection - 92.45% accuracy with pre-trained XGBoost model
- AI Analysis - Business impact, attack scenarios, step-by-step fixes
- Real Breach Training - Patterns from Capital One, Uber, Tesla, MongoDB
- 50+ Security Patterns - S3, IAM, Security Groups, RDS, and more
- SARIF 2.1.0 Output - Native GitHub Security integration
- Docker Ready - Pre-built container image
- GitHub Action - One-line CI/CD integration
Cost optimization:
- Fallback Mode: $0
- Bedrock Mode: ~$2-5/month
Documentation:
Updates soon!
- v2.1.0: AWS Bedrock integration (dynamic AI responses)
- v2.2.0: Compliance framework mappings (NIST, CIS, PCI-DSS)
- v2.3.0: Multi-cloud support (Azure, GCP)
Trained on breach data from public security reports and CVE database.