Hello Terraform, CloudFormation developers, IaC Engine Today, we are happy to announce that SonarCloud can start helping you deploying safer infrastructures. This is just the beginning of the journey with the first set of 10 rules targeting mainly AWS S3 buckets. Security Hotspot Detections: A…

Does this feature supports checking Terraform code against Azure?

@Raghu_Vamsi For the moment, the support of Terraform is limited to AWS and the 10 rules I mentioned. Definitely we want to add more rules for AWS and then start to look at Azure and GCP.

Hi, Can this plugin be installed in Sonarqube community as well ? Do you have a link to the plugin ? Best regards

Hello, The IaC Analyzer is not compatible yet with SonarQube but it’s part of 9.x roadmap to bring such features to SonarQube users. Alex

Update: if everything goes well, the IaC Analyzer will be embedded with SonarQube Community Edition 9.2

Is it possible to add custom rules? I don’t see it listed in the 9.2 documentation at Adding Coding Rules | SonarQube Docs

This is not yet possible to add custom rules. Still, you can contribute to the project by suggesting rule ideas .

Hello @Raghu_Vamsi , We are currently working on Terraform Code Scanning for Azure resources; our work will be released soon! :grinning:

Does this work when the Terraform main.tf is calling provider modules within the terraform code? If not, is this on the roadmap as Terraform Modules are best practice fo repetitive infrastructure.

SonarCloud can scan Terraform and CloudFormation files + cfn-lint support

Sonar Updates

Topic		Replies	Views
Need support for Sonarqube scanning for terraform and Cloufomration code (template) SonarQube Server / Community Build sonarqube	1	403	May 22, 2022
SonarCloud detects unencrypted AWS resources at rest on CloudFormation and Terraform files Sonar Updates security , iac , terraform , cloudformation , aws	0	855	September 15, 2021
Terraform configuration scanning SonarQube Server / Community Build iac , terraform	9	2649	March 30, 2022
SonarCloud detects Permission problems on AWS resources on CloudFormation and Terraform files Sonar Updates security , iac , terraform , cloudformation , aws	0	1421	September 30, 2021
Terraform support against Azure Plugin Development sonarqube , azure , terraform	2	831	August 25, 2021

SonarCloud can scan Terraform and CloudFormation files + cfn-lint support

Related topics