terraform-switcher VS terrascan

‍TFSwitch is a CLI tool that allows easy switching between different Terraform versions, simplifying workflows in environments where multiple Terraform versions are used.

tfswitch might help with particular issue of terraform versioning:

https://tfswitch.warrensbox.com/

Even then some versions of terraform providers are not compatible with M1 macs. Docker would help with that probably, but so can: https://github.com/kreuzwerker/m1-terraform-provider-helper

Perhaps these sort of issues support the benefits of per-module docker images?

My approach is to change the version in the version.tf file, install the new version using tfswitch (https://tfswitch.warrensbox.com/) and execute a plan. If infrastructure matches the configuration I will asume there are no breaking changes...

Also, an excellent tool can help with fast switching between different Terraform versions while you’re experimenting — tfswitch.

https://tfswitch.warrensbox.com/ for switching between Terraform versions

It was easy. I didn't use terraform-version files like you, but there are similar ways to automatically switch versions. https://github.com/warrensbox/terraform-switcher

Terraform Switcher - yet another project essentially doing the same written in go;

2. Terrascan: https://github.com/tenable/terrascan Terrascan detects security vulnerabilities and compliance violations across your IaC. Supports multiple cloud providers, ensuring that your infrastructure complies with security best practices.

Terrascan Owner/Maintainer: Tenable (acquired in 2022) Age: First release on GitHub on November 28th, 2017 License: Apache License 2.0

‍Terrascan is a static code analysis tool that scans your Infrastructure-as-Code (IaC) for security vulnerabilities and compliance violations. It supports multiple platforms like (AWS, Azure, GCP, K8s, Atlantis, etc), including Terraform. Terrascan allows you to enforce security best practices, compliance policies, and governance across your IaC deployments.

Terrascan could also be useful : https://github.com/tenable/terrascan

Terrascan - Scan for Infrastructure-as-Code vulnerabilities

(https://runterrascan.io/) They seem to like it, don't have a ton of my own experience though.

Nessus Expert - newer offering. Nessus Pro + terrascan + basic external attack surface mapping. Doesn’t scan from the internet, but shows you all your public domains, DNS, etc so you can pick what you want to scan/ fix

It is always a good practice to scan your Kubernetes deployment or Helm chart before deploying. We can use Checkov to scans Kubernetes manifests and identifies security and configuration issues. It also supports Helm chart scanning. We can also use terrascan and kubeLinter to scan the Kubernetes manifest.