phy-iac-sec-audit — Infrastructure as Code Security Auditor

Scans Terraform, CloudFormation, and Pulumi files for 12 cloud security misconfigurations that cause data breaches, crypto-mining attacks, and compliance failures. No tfsec, checkov, or cloud credentials required — pure static analysis. Zero external dependencies.

Quick Start

# Scan a directory of Terraform files
python iac_sec_audit.py ./infrastructure

# Single file
python iac_sec_audit.py main.tf

# Scan CloudFormation template
python iac_sec_audit.py cloudformation.yaml

# CI mode — exit 1 on CRITICAL or HIGH
python iac_sec_audit.py ./terraform --ci