One governed path from infrastructure change to production - for humans and AI alike.
Tirith is our open-source policy engine for the AI generated and operated IaC. It reads the plan your pipeline already produces (terraform show -json), checks it against your policies, and exits non-zero so a violating change never reaches apply. It's Apache-2.0, needs no account, and runs in the CI you already use.
- Tirith: CLI and policy engine
- tirith-iac-governance-action: Tirith as a GitHub Actions step
- Docs
| Repository | Use it to |
|---|---|
| stackguardian-mcp | Deploy Terraform, OpenTofu and Ansible with AI agents in minutes. |
| sg-cli | Work with StackGuardian from the command line |
| terraform-provider-stackguardian | Manage StackGuardian resources with Terraform |
