Detecting Terraform Misconfigurations with Trivy: A Comparison Demo with Checkov

Following our Checkov demo, we scanned the same Terraform code with Trivy. Checkov found 37 issues; Trivy found 27. Where does the gap come from? We compare severity classification, IAM wildcard handling, and check ID systems using actual scan results.