w3security-iac-capture

README

W3Security IaC Capture CLI Extension

Overview

This module implements the W3Security CLI Extension to capture a Terraform state, filter it and send it to W3Security API.

Filtering

We use an allowlist to ensure we only send expected and non-sensitive information to the W3Security API.

You can find the expected fields in state.go and statefilter.go.

Usage

This repository produces a standalone binary for debugging purposes. We advise to use this command as part of W3Security CLI.

This is the usage for the standalone binary:

Usage of w3security-iac-capture:
      --api-rest-token string   Auth token for the API Usage (Required)
      --api-rest-url string     Url for W3Security REST API (default "https://api.w3security.tech")
  -d, --debug                   Show debug information (Optional default false)
      --org string              Organization public id (Required)
      --path string             Path to look for Terraform state files (can be a file, a directory or a glob pattern) (Optional default ".")
      --stdin                   Read Terraform state from the standard input instead of path (Optional)