diff --git a/README.md b/README.md index d1143bf..ed99fa9 100644 --- a/README.md +++ b/README.md @@ -2,6 +2,19 @@

+> 📣 All of our scanning-related efforts have moved to one place, and that is Trivy. Please look at the [migration guide](https://aquasecurity.github.io/trivy/latest/tutorials/tfsec/migration/) and the Trivy [docs](https://aquasecurity.github.io/trivy/latest/) for further information. +## 📣 tfsec to Trivy Migration + +As part of our goal to provide a comprehensive open source security solution for all, we have been consolidating all of our scanning-related efforts in one place, and that is [Trivy](https://github.com/aquasecurity/trivy). + +Over the past year, tfsec has laid the foundations to Trivy's IaC & misconfigurations scanning capabilities, including Terraform scanning, which has been natively supported in Trivy for a long time now. + +Going forward we want to encourage the tfsec community to transition over to Trivy. Moving to Trivy gives you the same excellent Terraform scanning engine, with some extra benefits: +1. Access to more languages and features in the same tool. +2. Access to more integrations with tools and services through the rich ecosystem around Trivy. +3. Commercially supported by Aqua as well as by a the passionate Trivy community. +tfsec will continue to remain available for the time being, although our engineering attention will be directed at Trivy going forward. + # tfsec-pr-commenter-action Add comments to pull requests where tfsec checks have failed