StackGuardian/tirith

View on GitHub

Plug IaC governance into any IaC pipeline. Evaluate plans with Tirith, protect sensitive values, enforce centralised policies, and surface actionable results before infrastructure changes are applied.

Stars: 165
Forks: 42
Open beginner issues: 0
Indexed issues: 102
Avg merge: 1d 3h
Merged PRs (30d): 11

Dominant language: Python
License: Apache-2.0
Last GitHub push: Sep 9, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue help wanted hacktoberfest

Beginner friendly Everything

Open All

102 issues indexed so far

feat(core): YAML policy format with transformation functions via `!` tags Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

StackGuardian/tirith#375 · Opened Sep 11, 2026
docs: add docstrings across the codebase Open

good first issue help wanted

Difficulty 3/5 1-2 days Newbie friendliness 68/100

StackGuardian/tirith#370 · Opened Sep 4, 2026
feat(core): rename `meta.required_provider` to `meta.provider`, keeping backward compatibility Open

enhancement good first issue

Difficulty 3/5 1-2 days Newbie friendliness 76/100

StackGuardian/tirith#369 · Opened Sep 4, 2026
chore: raise the supported Python floor from 3.8 Open

enhancement good first issue

Difficulty 4/5 3-5 days Newbie friendliness 55/100

StackGuardian/tirith#368 · Opened Sep 4, 2026
chore: adopt ruff for linting, formatting and import sorting Open

enhancement good first issue

Difficulty 4/5 3-5 days Newbie friendliness 64/100

StackGuardian/tirith#367 · Opened Sep 4, 2026
research(policy): governance policies for AI coding agents touching infra Open

research

Difficulty 4/5 3-5 days Newbie friendliness 45/100

StackGuardian/tirith#360 · Opened Sep 3, 2026
research(platform): approvals when using Tirith Open

research

Difficulty 5/5 Over a week Newbie friendliness 25/100

StackGuardian/tirith#359 · Opened Sep 3, 2026
research(provider): `repo_metadata` — the input-document shape for live repo state Open

research

Difficulty 5/5 Over a week Newbie friendliness 35/100

StackGuardian/tirith#358 · Opened Sep 3, 2026
research(interop): a Terraform/OpenTofu provider *for* Tirith Open

research

Difficulty 5/5 Over a week Newbie friendliness 25/100

StackGuardian/tirith#357 · Opened Sep 3, 2026
research(docs): an assistant-facing authoring guide Open

research

Difficulty 1/5 1-3 hours Newbie friendliness 78/100

StackGuardian/tirith#356 · Opened Sep 3, 2026
research(editors): tirith lsp — live policy checks in the editor Open

research

Difficulty 5/5 Over a week Newbie friendliness 38/100

StackGuardian/tirith#355 · Opened Sep 3, 2026
research(arch): hosted / user-deployed proxy — server-client mode Open

research

Difficulty 5/5 Over a week Newbie friendliness 30/100

StackGuardian/tirith#354 · Opened Sep 3, 2026
research(positioning): Kubernetes admission-policy comparison Open

research

Difficulty 3/5 1-2 days Newbie friendliness 68/100

StackGuardian/tirith#353 · Opened Sep 3, 2026
research(interop): interoperability with external scanners Open

research

Difficulty 5/5 Over a week Newbie friendliness 35/100

StackGuardian/tirith#352 · Opened Sep 3, 2026
research(kubernetes): provider enhancement; ArgoCD / FluxCD admission integration Open

research

Difficulty 5/5 Over a week Newbie friendliness 30/100

StackGuardian/tirith#351 · Opened Sep 3, 2026
research(core): state ↔ plan correlation Open

research

Difficulty 5/5 Over a week Newbie friendliness 35/100

StackGuardian/tirith#350 · Opened Sep 3, 2026
research(provider): cloud runtime state as a table-keyed json document Open

research

Difficulty 5/5 Over a week Newbie friendliness 30/100

StackGuardian/tirith#349 · Opened Sep 3, 2026
research(provider): `terraform_code` — an HCL source provider Open

research

Difficulty 5/5 Over a week Newbie friendliness 25/100

StackGuardian/tirith#348 · Opened Sep 3, 2026
feat(core): external providers and condition types — a plugin interface Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 38/100

StackGuardian/tirith#347 · Opened Sep 3, 2026
feat(integrations): wave 1 — TFC/HCP run task, Atlantis custom workflow, Jenkins, pre-commit Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

StackGuardian/tirith#346 · Opened Sep 3, 2026
chore(distribution): Homebrew tap, Docker image, Dev Container feature, nix, pre-commit hook, GitHub Marketplace listing Open

chore

Difficulty 5/5 Over a week Newbie friendliness 42/100

StackGuardian/tirith#345 · Opened Sep 3, 2026
feat(cli): wrapper mode — `tirith tf plan` for a fast local check Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 52/100

StackGuardian/tirith#344 · Opened Sep 3, 2026
feat(cli): named multi-input — `-input plan=plan.json -input scan=scanner.json` Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

StackGuardian/tirith#343 · Opened Sep 3, 2026
feat(core): mixed-provider policies — choose the provider per evaluator Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 55/100

StackGuardian/tirith#342 · Opened Sep 3, 2026
feat(cli): plan identity — a canonical hash in the verdict, and `tirith verify --expect <hash>` Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 45/100

StackGuardian/tirith#341 · Opened Sep 3, 2026
feat(terraform_plan): multiple `resource_type`s per operation; data resources Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 55/100

StackGuardian/tirith#340 · Opened Sep 3, 2026
feat(terraform_plan): `referenced_by_filter` + `referenced_by_attribute` on `direct_references` Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

StackGuardian/tirith#339 · Opened Sep 3, 2026
feat(core): `condition.transform` — `json_decode`, `path`, `length` Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

StackGuardian/tirith#338 · Opened Sep 3, 2026
feat(terraform_plan): `include_nested_expressions` on `direct_references` Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 48/100

StackGuardian/tirith#337 · Opened Sep 3, 2026
feat(terraform_plan): sensitivity awareness — `before_sensitive` / `after_sensitive` Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 38/100

StackGuardian/tirith#336 · Opened Sep 3, 2026
feat(terraform_plan): an `output_changes` operation Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 48/100

StackGuardian/tirith#335 · Opened Sep 3, 2026
feat(terraform_plan): `module_address` filtering on every operation Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 48/100

StackGuardian/tirith#334 · Opened Sep 3, 2026
feat(terraform_plan): expose `action_reason` Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 68/100

StackGuardian/tirith#333 · Opened Sep 3, 2026
feat(terraform_plan): read `change.before` — `attribute_source: before|after|delta` and a `Transitioned` condition Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 45/100

StackGuardian/tirith#332 · Opened Sep 3, 2026
feat(policies): predefined compliance packs — CIS, HIPAA, PCI, NIST and more, out of the box Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

StackGuardian/tirith#331 · Opened Sep 3, 2026
feat(output): remediation steps in the verdict — PR comments and reports Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 55/100

StackGuardian/tirith#330 · Opened Sep 3, 2026
feat(core): inline suppressions — bypass/exclude/include checks from the code Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 45/100

StackGuardian/tirith#329 · Opened Sep 3, 2026
feat(output): HTML report — `--output-html` Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 52/100

StackGuardian/tirith#328 · Opened Sep 3, 2026
feat(policies): interoperability packs — import existing public checks as Tirith policies Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

StackGuardian/tirith#327 · Opened Sep 3, 2026
feat(cli): a default policy library — best-practice policies applied implicitly Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 55/100

StackGuardian/tirith#326 · Opened Sep 3, 2026
feat(cli): policies from git — `-policy-path git+https://…//path?ref=v1.2` Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 52/100

StackGuardian/tirith#325 · Opened Sep 3, 2026
docs(cookbook): engine-verified path idioms — membership, at-least-one, and the traps Open

documentation

Difficulty 4/5 3-5 days Newbie friendliness 48/100

StackGuardian/tirith#324 · Opened Sep 3, 2026
fix(terraform_plan): widen `provider_config` — remove `SUPPORTED_ATTRIBUTES`, fix two live bugs Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 55/100

StackGuardian/tirith#323 · Opened Sep 3, 2026
feat(core): `AnyElement` / `NoElement` conditions with an explicit `not` clause flag Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 42/100

StackGuardian/tirith#322 · Opened Sep 3, 2026
feat(policies): ship the StackGuardian best-practice checks as a Tirith policy pack Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 55/100

StackGuardian/tirith#321 · Opened Sep 3, 2026
feat(cli): SARIF output — `--format sarif` Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 55/100

StackGuardian/tirith#320 · Opened Sep 3, 2026
feat(cli): policy packs — a manifest that selects and tags a policy set Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

StackGuardian/tirith#319 · Opened Sep 3, 2026
feat(cli): `tirith test` — complete the policy test harness Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 48/100

StackGuardian/tirith#318 · Opened Sep 3, 2026
feat(json): type-scoped member reads — `select_path` + `select_type` on `get_value` Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 48/100

StackGuardian/tirith#317 · Opened Sep 3, 2026
feat(terraform_plan): `resource_filter` — a per-record scoping predicate on `attribute` and `count` Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

StackGuardian/tirith#316 · Opened Sep 3, 2026

StackGuardian/tirith

Get new issues in your inbox