trooth

Compliance, automated — from your terminal. Scan a Terraform plan against SOC 2, ISO 27001, GDPR, HIPAA, NIST AI RMF, and the EU AI Act, and get a signed Compliance Delta back.

Advisory and report-only. Trooth never applies changes to your infrastructure.

Install / run

# No install needed:
npx trooth scan ./plan.tfplan

# or generate JSON yourself first:
terraform show -json plan.tfplan > plan.json
npx trooth scan plan.json

Commands

| Command | What it does | | --- | --- | | trooth scan <plan> | Posts your terraform show -json plan to Trooth Pre-Flight (POST https://api.trooth.co/v1/preflight) and prints the verdict, score, and findings. Accepts a JSON file or a binary .tfplan (it runs terraform show -json for you). | | trooth lint [path] | Local, read-only IaC drift check. Never transmits your code. | | trooth --help / --version | Help / version. |

Flags

• --strict — exit non-zero if there are findings (default: exit 0, advisory).
• --json — print the raw signed Compliance Delta.

Notes

• Only your declared plan is sent to the Pre-Flight API; nothing is written back, and Trooth never touches live infrastructure.
• Set TROOTH_API to point at a different base URL (defaults to https://api.trooth.co).
• Requires Node 18+ (uses built-in fetch).

Trooth automates. Trooth never signs for you.