Owner

StackGuardian

3 indexed repositories · View on GitHub

tirith
Plug IaC governance into any IaC pipeline. Evaluate plans with Tirith, protect sensitive values, enforce centralised policies, and surfac...

Python · 165 stars
terraform-provider-stackguardian
Terraform provider for StackGuardian

Go · 4 stars
skills
AI agent skills for using StackGuardian. Works with OpenCode, Claude Code, and any agent supporting SKILL.md.

HCL · 0 stars

Beginner friendly Everything

Open All

feat(core): `AnyElement` / `NoElement` conditions with an explicit `not` clause flag Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 42/100

StackGuardian/tirith#322 · Opened Sep 3, 2026
feat(policies): ship the StackGuardian best-practice checks as a Tirith policy pack Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 55/100

StackGuardian/tirith#321 · Opened Sep 3, 2026
feat(cli): SARIF output — `--format sarif` Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 55/100

StackGuardian/tirith#320 · Opened Sep 3, 2026
feat(cli): policy packs — a manifest that selects and tags a policy set Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

StackGuardian/tirith#319 · Opened Sep 3, 2026
feat(cli): `tirith test` — complete the policy test harness Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 48/100

StackGuardian/tirith#318 · Opened Sep 3, 2026
feat(json): type-scoped member reads — `select_path` + `select_type` on `get_value` Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 48/100

StackGuardian/tirith#317 · Opened Sep 3, 2026
feat(terraform_plan): `resource_filter` — a per-record scoping predicate on `attribute` and `count` Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

StackGuardian/tirith#316 · Opened Sep 3, 2026
chore(naming): align on `tirith-iac-governance` Open

chore

Difficulty 4/5 3-5 days Newbie friendliness 55/100

StackGuardian/tirith#315 · Opened Sep 3, 2026
docs(platform): running `tirith platform check` and the Terraform CLI cloud block side by side Open

documentation

Difficulty 3/5 1-2 days Newbie friendliness 68/100

StackGuardian/tirith#314 · Opened Sep 3, 2026
feat(action): push state automatically via a post-run step Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 56/100

StackGuardian/tirith#313 · Opened Sep 3, 2026
feat(platform): run local + platform policies in one `tirith platform check` invocation Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 55/100

StackGuardian/tirith#312 · Opened Sep 3, 2026
feat(action): configurable Terraform version and an OpenTofu switch Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 64/100

StackGuardian/tirith#311 · Opened Sep 3, 2026
feat(provider): repo-metadata checks and a GitHub metadata collector Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 42/100

StackGuardian/tirith#310 · Opened Sep 3, 2026
feat(compat): Terragrunt support Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 55/100

StackGuardian/tirith#309 · Opened Sep 3, 2026
feat(integrations): Bitbucket Cloud Pipe Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 42/100

StackGuardian/tirith#308 · Opened Sep 3, 2026
docs(site): landing page refresh and a Tirith icon Open

documentation

Difficulty 4/5 3-5 days Newbie friendliness 48/100

StackGuardian/tirith#307 · Opened Sep 3, 2026
feat(platform): reuse an existing StackGuardian workflow in `tirith platform check` Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 55/100

StackGuardian/tirith#306 · Opened Sep 3, 2026
feat(platform): pass raw workflow parameters through `tirith platform check` Open

enhancement need-discussion

Difficulty 5/5 Over a week Newbie friendliness 25/100

StackGuardian/tirith#305 · Opened Sep 3, 2026
feat(terraform_plan): clearer reason messages — resource, action and attribute in every result Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 25/100

StackGuardian/tirith#304 · Opened Sep 3, 2026
refactor(core): replace `eval()` in the final-expression parser Open

chore

Difficulty 5/5 Over a week Newbie friendliness 38/100

StackGuardian/tirith#303 · Opened Sep 3, 2026
docs: state that the terraform_plan provider is OpenTofu-compatible Open

documentation

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

StackGuardian/tirith#302 · Opened Sep 3, 2026
feat(cli): `tirith test` — a policy test harness (skeleton) Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 68/100

StackGuardian/tirith#301 · Opened Sep 3, 2026
feat(output): name the resource address in every result Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 76/100

StackGuardian/tirith#300 · Opened Sep 3, 2026
feat(terraform_plan): filter `count` by change action Open

enhancement

Difficulty 2/5 1-3 hours Newbie friendliness 74/100

StackGuardian/tirith#299 · Opened Sep 3, 2026
feat(cli): `--fail-on-severity critical|high|medium|low` Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 70/100

StackGuardian/tirith#298 · Opened Sep 3, 2026
feat(core): decide what "nothing in scope" means — `no_match_result` and exit codes Open

enhancement need-discussion

Difficulty 5/5 Over a week Newbie friendliness 35/100

StackGuardian/tirith#297 · Opened Sep 3, 2026
fix(core): variable substitution does not recurse — nested `{{var.x}}` silently produces wrong verdicts Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 68/100

StackGuardian/tirith#296 · Opened Sep 3, 2026
fix(providers): dotted keys are addressable from terraform_plan but not from json/kubernetes Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 85/100

StackGuardian/tirith#295 · Opened Sep 3, 2026
fix(json): absent attributes are dropped, so "every element has X" is vacuously true Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

StackGuardian/tirith#294 · Opened Sep 3, 2026
🐛 File exists message Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 35/100

StackGuardian/tirith#271 · Opened Feb 9, 2026
Add resource address to the result Open

enhancement

StackGuardian/tirith#261 · 1 assignee · Opened May 30, 2025
Deduplicate result message logic Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 40/100

StackGuardian/tirith#255 · Opened May 13, 2025
Tirith policy for detecting changes in JSON files Open

need-discussion

Difficulty 5/5 Over a week Newbie friendliness 25/100

StackGuardian/tirith#236 · Opened Mar 21, 2025
🐛 AWS RDS terraform count is not working Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 35/100

StackGuardian/tirith#230 · Opened Feb 25, 2025
🚀 Support for multiple providers in the same policy Open

brainstorm enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

StackGuardian/tirith#223 · Opened Feb 4, 2025
🚀 Change get_value to get_attribute in JSON provider Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 20/100

StackGuardian/tirith#222 · Opened Jan 9, 2025
🚀 Update SG workflow provider Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

StackGuardian/tirith#221 · 2 comments · Opened Jan 9, 2025
Support multiple `resource_type` for terraform_plan provider operations Open

enhancement help wanted

Difficulty 4/5 3-5 days Newbie friendliness 45/100

StackGuardian/tirith#219 · Opened Jan 8, 2025
Azure Policies ↔ Tirith Policy Open

brainstorm enhancement imported-task

Difficulty 5/5 Over a week Newbie friendliness 10/100

StackGuardian/tirith#215 · Opened Dec 26, 2024
Support for dynamically getting input data Open

enhancement imported-task

Difficulty 5/5 Over a week Newbie friendliness 25/100

StackGuardian/tirith#214 · Opened Dec 26, 2024
Build a framework for creating a roadmap Open

enhancement imported-task

Difficulty 5/5 Over a week Newbie friendliness 15/100

StackGuardian/tirith#212 · Opened Dec 26, 2024
Bug: Infracost provider fails to find resources when resource name contains “module.***” Open

bug imported-task

Difficulty 4/5 3-5 days Newbie friendliness 15/100

StackGuardian/tirith#211 · 1 comment · Opened Dec 26, 2024
Support data resource for terraform_plan Open

enhancement imported-task

Difficulty 4/5 3-5 days Newbie friendliness 20/100

StackGuardian/tirith#208 · Opened Dec 26, 2024
IP/cidr inside cidr evaluator Open

enhancement imported-task

Difficulty 4/5 3-5 days Newbie friendliness 25/100

StackGuardian/tirith#207 · Opened Dec 25, 2024
Research on GitHub bots we can use for automatically labelling PRs/issues Open

research

Difficulty 5/5 Over a week Newbie friendliness 25/100

StackGuardian/tirith#203 · Opened Nov 5, 2024
Replace Tirith final_expression parser from eval() to a safer approach Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

StackGuardian/tirith#172 · 1 comment · Opened Aug 28, 2024
Tirith Client-Server architecture Open

brainstorm need-discussion

Difficulty 5/5 Over a week Newbie friendliness 20/100

StackGuardian/tirith#165 · 1 comment · Opened Aug 6, 2024
Tirith as an authz engine Open

brainstorm need-discussion

Difficulty 5/5 Over a week Newbie friendliness 15/100

StackGuardian/tirith#164 · Opened Aug 6, 2024
Tirith Policy for Wiz Policy Open

brainstorm need-discussion

Difficulty 5/5 Over a week Newbie friendliness 25/100

StackGuardian/tirith#162 · Opened Aug 6, 2024
Tirith Policy for Azure Policy Open

brainstorm need-discussion

Difficulty 3/5 1-2 days Newbie friendliness 35/100

StackGuardian/tirith#161 · Opened Aug 6, 2024

Showing the newest 100

This page lists what was indexed most recently. Advanced filter has the whole inventory, narrowed by language, difficulty and how long a task takes.

Open advanced filter

StackGuardian

Showing the newest 100

Get new issues in your inbox