tfsec

Static analysis security scanner for Terraform. Now part of Trivy but still maintained for teams that want a focused Terraform-only CLI.