{
  "id": "tool:tfsec",
  "_kind": "Tool",
  "_file": "domain/tools/tools-security-observability.yaml",
  "_cluster": "domain",
  "attributes": {
    "displayName": "tfsec",
    "homepageUrl": "https://github.com/aquasecurity/tfsec",
    "kind": "security",
    "description": "Security scanner for Terraform code that identifies misconfigurations and potential vulnerabilities\nin cloud infrastructure definitions before deployment. Covers AWS, Azure, GCP, and general\nTerraform resources with configurable severity levels and custom checks.\n"
  },
  "outgoingEdges": [
    {
      "from": "tool:tfsec",
      "to": "language:go",
      "kind": "belongs_to_language"
    },
    {
      "from": "tool:tfsec",
      "to": "skill-area:iac-security",
      "kind": "tool_used_by",
      "attributes": {}
    },
    {
      "from": "tool:tfsec",
      "to": "skill-area:vulnerability-scanning",
      "kind": "tool_used_by",
      "attributes": {}
    },
    {
      "from": "tool:tfsec",
      "to": "skill-area:vulnerability-scanning",
      "kind": "used_for"
    },
    {
      "from": "tool:tfsec",
      "to": "skill-area:runtime-security",
      "kind": "used_for"
    },
    {
      "from": "tool:tfsec",
      "to": "tool:checkov",
      "kind": "alternative_to",
      "attributes": {
        "comparison": "IaC security — tfsec is Terraform-specific; Checkov covers multi-IaC"
      }
    },
    {
      "from": "tool:tfsec",
      "to": "tool:trivy",
      "kind": "alternative_to",
      "attributes": {
        "comparison": "Security scanning — tfsec is Terraform-specific; Trivy is multi-target"
      }
    },
    {
      "from": "tool:tfsec",
      "to": "tool:snyk",
      "kind": "alternative_to",
      "attributes": {
        "comparison": "Security scanning tools"
      }
    }
  ],
  "incomingEdges": [
    {
      "from": "tool:snyk",
      "to": "tool:tfsec",
      "kind": "alternative_to",
      "attributes": {
        "comparison": "Security scanning tools"
      }
    },
    {
      "from": "tool:trivy",
      "to": "tool:tfsec",
      "kind": "alternative_to",
      "attributes": {
        "comparison": "Security scanning — Trivy is multi-target; tfsec is Terraform-specific"
      }
    },
    {
      "from": "tool:checkov",
      "to": "tool:tfsec",
      "kind": "alternative_to",
      "attributes": {
        "comparison": "IaC security — Checkov covers multi-IaC; tfsec is Terraform-specific"
      }
    }
  ]
}