Dontopedia

Static Code Analysis Tools for Terraform

From Dontopedia, the open, paraconsistent wiki. (Last updated 2026-06-08.)

Static Code Analysis Tools for Terraform has 24 facts recorded in Dontopedia across 4 references, with 5 live disagreements.

24 facts·14 predicates·4 sources·5 in dispute

Mostly:rdf:type(3), includes(3), lists examples(3)

Maturity scale raw canonical shape-checked rule-derived certified

Inbound mentions (3)

Other subjects in dontopedia point AT this entity as a value. These are inverse relationships — e.g. "X motherOf this subject" — and answer questions the forward facts can't. Grouped by predicate.

comprisesComprises(1)

discussesDiscusses(1)

recommendsRecommends(1)

Other facts (23)

The long tail: predicates that appear too rarely to warrant their own section. Filter or scroll to find a specific one. Each row links to its source.

23 facts
PredicateValueRef
Rdf:typeTool Category[1]
Rdf:typeTool Category[2]
Rdf:typeSecurity Tool Category[3]
Includestfsec[2]
Includescheckov[2]
Includesterrascan[2]
Lists Examplestfsec[2]
Lists Examplescheckov[2]
Lists Examplesterrascan[2]
ExamplesTfsec Tool[4]
ExamplesCheckov Tool[4]
ExamplesTerrascan Tool[4]
Used forSensitive Data Detection[3]
Used forcompliance-checking[4]
Mentioned inConclusion Section[1]
Proposed Solution forSensitive Data Detection[1]
DetectsSensitive Data[2]
Section Number3[2]
Describes Capabilitydetect-security-issues[2]
Integration TargetCd Pipeline[3]
Categorysecurity tools[3]
ProvidesCompliance Checking[4]
EnablesThorough Compliance Checks[4]

Timeline

Timeline axis is valid_time — when each source says the fact was true in the world, not when Dontopedia learned about it. Retracted rows are kept for provenance; coloured stripes indicate the context kind.

24 undated
—
typebeam/a6fa1f54-9364-4eed-820f-4787ae18beae
ex:ToolCategory
—
mentionedInbeam/a6fa1f54-9364-4eed-820f-4787ae18beae
ex:conclusion-section
—
proposedSolutionForbeam/a6fa1f54-9364-4eed-820f-4787ae18beae
ex:sensitive-data-detection
—
includesbeam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
tfsec
—
includesbeam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
checkov
—
includesbeam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
terrascan
—
detectsbeam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
ex:sensitive-data
—
typebeam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
ex:ToolCategory
—
sectionNumberbeam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
3
—
listsExamplesbeam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
tfsec
—
listsExamplesbeam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
checkov
—
listsExamplesbeam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
terrascan
—
describesCapabilitybeam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
detect-security-issues
—
typebeam/c792cb9f-fe51-4c08-8dd5-84025719f449
ex:SecurityToolCategory
—
usedForbeam/c792cb9f-fe51-4c08-8dd5-84025719f449
ex:sensitive-data-detection
—
integrationTargetbeam/c792cb9f-fe51-4c08-8dd5-84025719f449
ex:ci/cd-pipeline
—
categorybeam/c792cb9f-fe51-4c08-8dd5-84025719f449
security tools
—
examplesbeam/c0083cfc-91f9-4913-baa1-a079e9c27be3
ex:tfsec-tool
—
examplesbeam/c0083cfc-91f9-4913-baa1-a079e9c27be3
ex:checkov-tool
—
examplesbeam/c0083cfc-91f9-4913-baa1-a079e9c27be3
ex:terrascan-tool
—
labelbeam/c0083cfc-91f9-4913-baa1-a079e9c27be3
Static Code Analysis Tools for Terraform
—
usedForbeam/c0083cfc-91f9-4913-baa1-a079e9c27be3
compliance-checking
—
providesbeam/c0083cfc-91f9-4913-baa1-a079e9c27be3
ex:compliance-checking
—
enablesbeam/c0083cfc-91f9-4913-baa1-a079e9c27be3
ex:thorough-compliance-checks

References (4)

4 references
  1. [1]A6fa1f54 9364 4eed 820f 4787ae18beae3 facts
    ctx:claims/beam/a6fa1f54-9364-4eed-820f-4787ae18beae
    • full textbeam-chunk
      text/plain1 KBdoc:beam/a6fa1f54-9364-4eed-820f-4787ae18beae
      Show excerpt
      } resource "aws_s3_bucket" "example" { bucket = "my-bucket" } """ print(check_sensitive_data(config)) ``` ### Conclusion By enhancing your regex patterns, performing contextual analysis, integrating with secrets management tools, and …
  2. [2]A3ce4ce8 2bab 4b75 A483 A7b1017becd010 facts
    ctx:claims/beam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
    • full textbeam-chunk
      text/plain1 KBdoc:beam/a3ce4ce8-2bab-4b75-a483-a7b1017becd0
      Show excerpt
      variable "password" { default = "mysecretpassword" } resource "aws_s3_bucket" "example" { bucket = "my-bucket" } """ print(check_sensitive_data(config)) ``` ### 3. **Static Code Analysis Tools** Use static code analysis tools specifi…
  3. [3]C792cb9f Fe51 4c08 8dd5 84025719f4494 facts
    ctx:claims/beam/c792cb9f-fe51-4c08-8dd5-84025719f449
    • full textbeam-chunk
      text/plain1 KBdoc:beam/c792cb9f-fe51-4c08-8dd5-84025719f449
      Show excerpt
      return "Sensitive data found but not checked in Vault" else: return "Config is secure" # Example usage config = """ variable "password" { default = "mysecretpassword" } resource "aws_s3_bucket" "example" { bucket =…
  4. [4]C0083cfc 91f9 4913 Baa1 A079e9c27be37 facts
    ctx:claims/beam/c0083cfc-91f9-4913-baa1-a079e9c27be3
    • full textbeam-chunk
      text/plain1 KBdoc:beam/c0083cfc-91f9-4913-baa1-a079e9c27be3
      Show excerpt
      # If there are matches, return a compliance report if matches: return "Config is compliant with GDPR" else: return "Config is not compliant with GDPR" ``` ### Integration with Compliance Auditing Tools Use stat…

See also

Keep researching

Missing something or suspicious of what's here? Kick off a research session — a Claude agent will investigate, cite its sources, and file new facts into a dedicated context you can review before accepting into the shared view.

↑