Ansible Role: tfsec

This Ansible role is designed to install tfsec on Debian/Ubuntu and EL systems. tfsec is a tool used to scan Terraform code for security issues, created by Liam Galvin.

Requirements

There are no special requirements.

Role Variables

The variables you can use are listed below (found in defaults/main.yml):

Variables list:

tfsec_app: tfsec
tfsec_version: 1.28.6
tfsec_os: "{{ ansible_system | lower }}"
tfsec_architecture_map:
  amd64: amd64
  arm: arm64
  x86_64: amd64
  armv6l: armv6
  armv7l: armv7
  aarch64: arm64
  32-bit: "386"
  64-bit: amd64
tfsec_dl_url: https://github.com/aquasecurity/{{ tfsec_app }}/releases/download/v{{ tfsec_version }}/{{ tfsec_app }}-{{ tfsec_os }}-{{ tfsec_architecture_map[ansible_architecture] }}
tfsec_bin_path: "/usr/local/bin/{{ tfsec_app }}"
tfsec_file_owner: root
tfsec_file_group: root
tfsec_file_mode: '0755'

Variables table:

Dependencies

There are no dependencies.

Example Playbook

To install tfsec using the default settings in your Ansible playbook:

- hosts: servers
  roles:
    - darkwizard242.tfsec

To specify a different version of tfsec:

- hosts: servers
  roles:
    - darkwizard242.tfsec
  vars:
    tfsec_version: 0.18.0

To change the location where the tfsec binary is placed:

- hosts: servers
  roles:
    - darkwizard242.tfsec
  vars:
    tfsec_bin_path: /bin/

License

This role is licensed under the MIT.

Author Information

This role was created by Ali Muhammad.