OptionsOn tfsec itself
--concise-output
Reduce the amount of output and no statistics
--config-file
Config file to use during run <config-file>
--custom-check-dir
Explicitly the custom checks dir location <custom-check-dir>
--debug
Enable debug logging (same as verbose)
-G--disable-grouping
Disable grouping of similar results
-e--exclude
Provide comma-separated list of rule IDs to exclude from run <excludeList>
--exclude-downloaded-modules
Remove results for downloaded modules in .terraform folder
--exclude-path
Folder path to exclude, can be used multiple times and evaluated in order of specification <excludePath>
--filter-results
Filter results to return specific checks only (supports comma-delimited input) <filterResults>
--force-all-dirs
Don't search for tf files, include everything below provided directory
-f--format
Select output format: default, json, csv, checkstyle, junit, sarif. To use multiple formats, separate with a comma and specify a base output filename with --out. A file will be written for each type. The first format will additionally be written stdout <format>
--ignore-hcl-errors
Stop and report an error if an HCL parse error is encountered
--include-ignored
Include ignored checks in the result output
--include-passed
Include passed checks in the result output
--migrate-ignores
Migrate ignore codes to the new ID structure
-m--minimum-severity
The minimum severity to report. One of CRITICAL, HIGH, MEDIUM, LOW <minimumSeverity>
--no-color
Disable colored output (American style!)
--no-colour
Disable coloured output
--no-ignores
Do not apply any ignore rules - normally ignored checks will fail
--no-module-downloads
Do not download remote modules
-O--out
Set output file. This filename will have a format descriptor appended if multiple formats are specified with --format <outputFile>
--print-rego-input
Print a JSON representation of the input supplied to rego policies
--rego-policy-dir
Directory to load rego policies from (recursively) <regoPolicyDir>
--run-statistics
View statistics table of current findings
--single-thread
Run checks using a single thread
-s--soft-fail
Runs checks but suppresses error code
--tfvars-file
Path to .tfvars file, can be used multiple times and evaluated in order of specification <tfvarsFilePath>
--update
Update to latest version
--verbose
Enable verbose logging (same as debug)
-v--version
Show version information and exit
-W--workspace
Specify a workspace for ignore limits (default "default") <workspace>
