Ansible Role: terrascan

This role installs terrascan on Debian/Ubuntu and EL systems by default. Terrascan checks for compliance and security issues in Infrastructure as Code, helping reduce risks before setting up cloud infrastructure.

Requirements

No requirements.

Role Variables

You can find available variables in defaults/main.yml:

List of Variables:

terrascan_app: terrascan
terrascan_version: 1.19.1
terrascan_os: "{{ ansible_system }}"
terrascan_architecture_map:
  amd64: x86_64
  arm: arm64
  x86_64: x86_64
  armv6l: armv6
  armv7l: armv7
  aarch64: arm64
  32-bit: "i386"
  64-bit: x86_64
terrascan_dl_url: https://github.com/tenable/{{ terrascan_app }}/releases/download/v{{ terrascan_version }}/{{ terrascan_app }}_{{ terrascan_version }}_{{ terrascan_os }}_{{ terrascan_architecture_map[ansible_architecture] }}.tar.gz
terrascan_bin_path: /usr/local/bin
terrascan_file_owner: root
terrascan_file_group: root
terrascan_file_permission_mode: '0755'

Variable Descriptions:

Dependencies

No dependencies

Example Playbook

To use the role (install terrascan) in Ansible playbooks by default:

- hosts: servers
  roles:
    - darkwizard242.terrascan

To customize the role behavior (e.g., specify the desired terrascan version):

- hosts: servers
  roles:
    - darkwizard242.terrascan
  vars:
    terrascan_version: 1.15.0

To customize the role behavior (e.g., place the terrascan binary in a different location):

- hosts: servers
  roles:
    - darkwizard242.terrascan
  vars:
    terrascan_bin_path: /bin/

License

MIT

Author Information

This role was created by Ali Muhammad.