StackGuardian/tirith

View on GitHub

Plug IaC governance into any IaC pipeline. Evaluate plans with Tirith, protect sensitive values, enforce centralised policies, and surface actionable results before infrastructure changes are applied.

Stars: 165
Forks: 42
Open beginner issues: 0
Indexed issues: 102
Avg merge: 1d 3h
Merged PRs (30d): 11

Dominant language: Python
License: Apache-2.0
Last GitHub push: Sep 9, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue help wanted hacktoberfest

Beginner friendly Everything

Open All

102 open issues indexed

chore(naming): align on `tirith-iac-governance` Open

chore

Difficulty 4/5 3-5 days Newbie friendliness 55/100

StackGuardian/tirith#315 · Opened Sep 3, 2026
docs(platform): running `tirith platform check` and the Terraform CLI cloud block side by side Open

documentation

Difficulty 3/5 1-2 days Newbie friendliness 68/100

StackGuardian/tirith#314 · Opened Sep 3, 2026
feat(action): push state automatically via a post-run step Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 56/100

StackGuardian/tirith#313 · Opened Sep 3, 2026
feat(platform): run local + platform policies in one `tirith platform check` invocation Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 55/100

StackGuardian/tirith#312 · Opened Sep 3, 2026
feat(action): configurable Terraform version and an OpenTofu switch Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 64/100

StackGuardian/tirith#311 · Opened Sep 3, 2026
feat(provider): repo-metadata checks and a GitHub metadata collector Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 42/100

StackGuardian/tirith#310 · Opened Sep 3, 2026
feat(compat): Terragrunt support Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 55/100

StackGuardian/tirith#309 · Opened Sep 3, 2026
feat(integrations): Bitbucket Cloud Pipe Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 42/100

StackGuardian/tirith#308 · Opened Sep 3, 2026
docs(site): landing page refresh and a Tirith icon Open

documentation

Difficulty 4/5 3-5 days Newbie friendliness 48/100

StackGuardian/tirith#307 · Opened Sep 3, 2026
feat(platform): reuse an existing StackGuardian workflow in `tirith platform check` Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 55/100

StackGuardian/tirith#306 · Opened Sep 3, 2026
feat(platform): pass raw workflow parameters through `tirith platform check` Open

enhancement need-discussion

Difficulty 5/5 Over a week Newbie friendliness 25/100

StackGuardian/tirith#305 · Opened Sep 3, 2026
feat(terraform_plan): clearer reason messages — resource, action and attribute in every result Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 25/100

StackGuardian/tirith#304 · Opened Sep 3, 2026
refactor(core): replace `eval()` in the final-expression parser Open

chore

Difficulty 5/5 Over a week Newbie friendliness 38/100

StackGuardian/tirith#303 · Opened Sep 3, 2026
docs: state that the terraform_plan provider is OpenTofu-compatible Open

documentation

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

StackGuardian/tirith#302 · Opened Sep 3, 2026
feat(cli): `tirith test` — a policy test harness (skeleton) Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 68/100

StackGuardian/tirith#301 · Opened Sep 3, 2026
feat(output): name the resource address in every result Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 76/100

StackGuardian/tirith#300 · Opened Sep 3, 2026
feat(terraform_plan): filter `count` by change action Open

enhancement

Difficulty 2/5 1-3 hours Newbie friendliness 74/100

StackGuardian/tirith#299 · Opened Sep 3, 2026
feat(cli): `--fail-on-severity critical|high|medium|low` Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 70/100

StackGuardian/tirith#298 · Opened Sep 3, 2026
feat(core): decide what "nothing in scope" means — `no_match_result` and exit codes Open

enhancement need-discussion

Difficulty 5/5 Over a week Newbie friendliness 35/100

StackGuardian/tirith#297 · Opened Sep 3, 2026
fix(core): variable substitution does not recurse — nested `{{var.x}}` silently produces wrong verdicts Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 68/100

StackGuardian/tirith#296 · Opened Sep 3, 2026
fix(providers): dotted keys are addressable from terraform_plan but not from json/kubernetes Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 85/100

StackGuardian/tirith#295 · Opened Sep 3, 2026
fix(json): absent attributes are dropped, so "every element has X" is vacuously true Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

StackGuardian/tirith#294 · Opened Sep 3, 2026
🐛 File exists message Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 35/100

StackGuardian/tirith#271 · Opened Feb 9, 2026
Add resource address to the result Open

enhancement

StackGuardian/tirith#261 · 1 assignee · Opened May 30, 2025
Deduplicate result message logic Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 40/100

StackGuardian/tirith#255 · Opened May 13, 2025
Tirith policy for detecting changes in JSON files Open

need-discussion

Difficulty 5/5 Over a week Newbie friendliness 25/100

StackGuardian/tirith#236 · Opened Mar 21, 2025
🐛 AWS RDS terraform count is not working Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 35/100

StackGuardian/tirith#230 · Opened Feb 25, 2025
🚀 Support for multiple providers in the same policy Open

brainstorm enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

StackGuardian/tirith#223 · Opened Feb 4, 2025
🚀 Change get_value to get_attribute in JSON provider Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 20/100

StackGuardian/tirith#222 · Opened Jan 9, 2025
🚀 Update SG workflow provider Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

StackGuardian/tirith#221 · 2 comments · Opened Jan 9, 2025
Support multiple `resource_type` for terraform_plan provider operations Open

enhancement help wanted

Difficulty 4/5 3-5 days Newbie friendliness 45/100

StackGuardian/tirith#219 · Opened Jan 8, 2025
Azure Policies ↔ Tirith Policy Open

brainstorm enhancement imported-task

Difficulty 5/5 Over a week Newbie friendliness 10/100

StackGuardian/tirith#215 · Opened Dec 26, 2024
Support for dynamically getting input data Open

enhancement imported-task

Difficulty 5/5 Over a week Newbie friendliness 25/100

StackGuardian/tirith#214 · Opened Dec 26, 2024
Build a framework for creating a roadmap Open

enhancement imported-task

Difficulty 5/5 Over a week Newbie friendliness 15/100

StackGuardian/tirith#212 · Opened Dec 26, 2024
Bug: Infracost provider fails to find resources when resource name contains “module.***” Open

bug imported-task

Difficulty 4/5 3-5 days Newbie friendliness 15/100

StackGuardian/tirith#211 · 1 comment · Opened Dec 26, 2024
Support data resource for terraform_plan Open

enhancement imported-task

Difficulty 4/5 3-5 days Newbie friendliness 20/100

StackGuardian/tirith#208 · Opened Dec 26, 2024
IP/cidr inside cidr evaluator Open

enhancement imported-task

Difficulty 4/5 3-5 days Newbie friendliness 25/100

StackGuardian/tirith#207 · Opened Dec 25, 2024
Research on GitHub bots we can use for automatically labelling PRs/issues Open

research

Difficulty 5/5 Over a week Newbie friendliness 25/100

StackGuardian/tirith#203 · Opened Nov 5, 2024
Replace Tirith final_expression parser from eval() to a safer approach Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

StackGuardian/tirith#172 · 1 comment · Opened Aug 28, 2024
Tirith Client-Server architecture Open

brainstorm need-discussion

Difficulty 5/5 Over a week Newbie friendliness 20/100

StackGuardian/tirith#165 · 1 comment · Opened Aug 6, 2024
Tirith as an authz engine Open

brainstorm need-discussion

Difficulty 5/5 Over a week Newbie friendliness 15/100

StackGuardian/tirith#164 · Opened Aug 6, 2024
Tirith Policy for Wiz Policy Open

brainstorm need-discussion

Difficulty 5/5 Over a week Newbie friendliness 25/100

StackGuardian/tirith#162 · Opened Aug 6, 2024
Tirith Policy for Azure Policy Open

brainstorm need-discussion

Difficulty 3/5 1-2 days Newbie friendliness 35/100

StackGuardian/tirith#161 · Opened Aug 6, 2024
Dynamic evaluators Open

enhancement need-discussion

Difficulty 5/5 Over a week Newbie friendliness 20/100

StackGuardian/tirith#157 · Opened Aug 2, 2024
Tirith command to bootstrap Tirith provider code Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

StackGuardian/tirith#155 · Opened Aug 2, 2024
Make Tirith core extensible with interfaces to add custom providers Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 30/100

StackGuardian/tirith#154 · Opened Aug 2, 2024
Tirith Copilot: Copilot for creating Tirith Policies Open

enhancement

StackGuardian/tirith#151 · 1 comment · 1 assignee · Opened Jul 31, 2024
Improve code structure and metadata for providers Open

need-discussion

Difficulty 4/5 3-5 days Newbie friendliness 30/100

StackGuardian/tirith#134 · 2 comments · Opened Jul 3, 2024
Reject unknown parameter if provided by the user (usually caused by typos) Open

enhancement need-discussion

Difficulty 3/5 1-2 days Newbie friendliness 35/100

StackGuardian/tirith#125 · 3 comments · Opened Dec 8, 2023
In `test_contained_in` and other tests, assert more data instead of just the `passed` key Open

chore

Difficulty 3/5 1-2 days Newbie friendliness 45/100

StackGuardian/tirith#104 · Opened Apr 26, 2023

StackGuardian/tirith

Get new issues in your inbox