qa-iac
Infrastructure-as-code testing: Checkov and Trivy misconfiguration scans, OPA, Conftest and Cedar policy tests, Helm chart tests, Terraform plan review. Trivy config is the tfsec successor, with the legacy tfsec workflow in references. A review agent (terraform-plan-reviewer) flags destructive and security-degrading plan changes. Cross-scanner IaC triage is handled by security-finding-triager in qa-security-scanning.
/plugin install qa-iac@testland-qaFirst time? Add the marketplace with /plugin marketplace add testland/qa
- Category
- Security & compliance
- Version
v1.2.3- Contents
- 4 skills · 1 agent
- Part of
- qa-role-security
Skills4
checkov-policyUse when infrastructure code (Terraform, CloudFormation, Kubernetes, Helm, ARM, Serverless, CDK) needs security scanning with the broadest built-in rule set: Checkov with custom Python checks, SARIF and JUnit output, and a baseline so CI fails only on new findings.skillhelm-chart-testerUse when a Helm chart's template logic needs unit tests: helm-unittest test files per template with isKind, equal, matchRegex and snapshot assertions, plus helm lint and helm template render checks.skillpolicy-as-code-runnerUse when a team needs custom policies that off-the-shelf scanners don't cover (cost limits, required tags, security baselines) enforced in CI.skilltrivy-configUse when adopting one IaC misconfiguration scanner for Terraform, CloudFormation, Kubernetes, Helm, Dockerfiles and ARM, or migrating off tfsec: trivy config with severity gating, .trivyignore suppressions, custom Rego checks and SARIF for GitHub code scanning.skill
Agents1
About qa-iac
Infrastructure-as-code testing + security policy. Terraform plan review, Helm chart unit testing, OPA / Conftest / Cedar policy testing, plus two differentiated security scanners (Checkov, Trivy - the tfsec successor, legacy tfsec workflow in its references). Cross-scanner IaC finding triage (unified verdict across Checkov / tfsec / KICS output) is handled by security-finding-triager in the qa-security-scanning plugin.