GitHub-Native Terraform Security: Catching Infrastructure Vulnerabilities at PR Time

This GitHub App solves the critical problem of security findings being ignored when they live only in CI pipelines—by bringing infrastructure scanning directly into developers' PRs. TerraWatch detects vulnerabilities like public S3 buckets and IAM wildcards inline, provides hardcoded code fixes, and blocks merges until issues are resolved, making secure-by-default practices a natural part of the development workflow. The lightweight, dependency-free approach with just 2 minutes of setup enables teams to shift infrastructure security left in a way they'll actually adopt.