Infrastructure as Code Support

Supported IaC Formats

Format	File Types	Capabilities
Terraform	`.tf`, `.tf.json`	Full HCL 2 parsing, module resolution (local, registry, Git), variable interpolation, dependency analysis
CloudFormation	`.yaml`, `.json`	AWS CloudFormation template parsing and threat detection
Docker / Docker Compose	`Dockerfile`, `docker-compose.yml`	Container configuration analysis
Helm	Helm chart directories	Chart scanning with value template rendering

Terraform Support

ThreatMitigator provides comprehensive Terraform analysis:

Full HCL 2 parsing - Complete support for the HashiCorp Configuration Language
Module resolution - Resolves local modules, Terraform Registry modules, and Git-hosted modules
Variable interpolation - Understands variable references and default values
Dependency analysis - Maps resource dependencies and relationships
Multi-cloud providers - AWS, Azure, GCP, Oracle Cloud, and Alibaba Cloud resources

Example

1
2
3
4
5
# Scan Terraform files
threatmitigator scan terraform ./infra

# Scan with specific format
threatmitigator scan terraform ./infra --format yaml

CloudFormation Support

Full parsing of AWS CloudFormation templates in both YAML and JSON formats. Detects security threats across all supported AWS resource types.

Docker Support

Analyze Dockerfiles and Docker Compose configurations for security issues:

Base image vulnerabilities
Exposed ports
Privilege escalation risks
Secret handling in build layers

Helm Support

Scan Helm chart directories with value template rendering. ThreatMitigator evaluates templates with their values to detect security threats in the final rendered Kubernetes manifests.

Application Code Scanning

In addition to IaC, ThreatMitigator scans application source code:

Language	Detection
Python	Security vulnerability scanning
Go	Network connection discovery for DFD generation
Rust	Network connection discovery for DFD generation

Multi-Cloud Coverage

Single tool coverage across all major cloud platforms:

Amazon Web Services - EC2, S3, RDS, Lambda, IAM, and 100+ services
Microsoft Azure - Virtual Machines, Storage, SQL Database, App Service, and more
Google Cloud Platform - Compute Engine, Cloud Storage, BigQuery, Cloud Functions
Oracle Cloud Infrastructure - Compute, Object Storage, Autonomous Database
Alibaba Cloud - ECS, OSS, RDS, VPC, RAM

Consistent Methodology

ThreatMitigator applies the same STRIDE framework across all clouds and IaC formats, providing:

Consistent severity ratings across platforms
Standardized threat categories
Comparable security posture metrics
Unified reporting format

1
2
# Scan all IaC in a directory
threatmitigator scan terraform ./infra --format yaml