Open-source cloud security platform and CLI that runs security and compliance checks across AWS, Azure, GCP and other cloud environments.
turbot/steampipe
Steampipe lets you query cloud APIs and services with SQL by exposing them as tables, with no ETL or separate database required.
- Stars
- 7,997
- Forks
- 347
- Open issues
- 32
- Last commit
- 23 hours ago
What is it?
Steampipe maps APIs and services to SQL tables through plugins. You write a normal SQL query and Steampipe calls the underlying API in real time, so there is no data pipeline to build and no copy of the data to keep in sync. Plugins cover AWS, Azure, GCP, Kubernetes, GitHub, Microsoft 365, Salesforce and many more, with more than 2,000 tables in total.
The core is a single binary with a bundled Postgres instance. It can also be used as native Postgres foreign data wrappers, as SQLite extensions, or through standalone export tools that need no database at all. Queries run in parallel across multiple data sources.
The project is aimed at cloud security, compliance and DevOps work, where teams want to ask questions across accounts and services in one language. Turbot also offers a hosted version, Turbot Pipes, for team use.
Key features
- 01Maps APIs and services to SQL tables through a plugin ecosystem.
- 02Runs live queries against APIs without a sync or ETL step.
- 03Ships as a single binary with a bundled Postgres instance.
- 04Offers Postgres FDW and SQLite extension distributions.
- 05Provides standalone export tools that work without a database.
- 06Queries multiple data sources in parallel.
Use cases
- Auditing cloud resources across AWS, Azure and GCP accounts with SQL queries.
- Checking Kubernetes clusters or GitHub organizations for configuration issues.
- Running compliance checks in CI/CD pipelines.
- Exporting API data to files without setting up a database.
Quick start
- 1
Install Steampipe on macOS with Homebrew
brew install turbot/tap/steampipe - 2
Run the official install script for Linux or Windows (WSL2) from the README
- 3
Install a plugin for your service, for example Hacker News
steampipe plugin install hackernews - 4
Start querying with SQL
steampipe query
Things to know
- Licensed under AGPL-3.0, a copyleft license with network-use obligations.
- Commercial distribution is under Turbot's own terms, and Turbot trademarks cannot be used by others.
In collections
Topics
FAQ
- What is steampipe?
- Steampipe lets you query cloud APIs and services with SQL by exposing them as tables, with no ETL or separate database required. Steampipe maps APIs and services to SQL tables through plugins. You write a normal SQL query and Steampipe calls the underlying API in real time, so there is no data pipeline to build and no copy of the data to keep in sync. Plugins cover AWS, Azure, GCP, Kubernetes, GitHub, Microsoft 365, Salesforce and many more, with more than 2,000 tables in total.
- Is steampipe free to use? What license does it have?
- steampipe is open source under the AGPL-3.0 license. Check the license terms before using it in commercial products.
- Is steampipe still maintained?
- Actively maintained. The last commit to steampipe was on Nov 6, 2026.
- What can I use steampipe for?
- Auditing cloud resources across AWS, Azure and GCP accounts with SQL queries. Checking Kubernetes clusters or GitHub organizations for configuration issues. Running compliance checks in CI/CD pipelines. Exporting API data to files without setting up a database.
- How do I install steampipe?
- Install Steampipe on macOS with Homebrew: brew install turbot/tap/steampipe Run the official install script for Linux or Windows (WSL2) from the README Install a plugin for your service, for example Hacker News: steampipe plugin install hackernews Start querying with SQL: steampipe query
- Where can I get steampipe?
- The source code and installation instructions are on GitHub: https://github.com/turbot/steampipe
Summary generated by AI from the project's README. GitHub stats refresh daily.
Related projects
Infrastructure as Code CLI and engine that lets you define and deploy cloud resources using general-purpose programming languages.
Static analysis tool that scans infrastructure as code, container images and open source packages for cloud misconfigurations and CVEs.
Read-only AWS security scanner with 110 checks, IAM privilege-escalation analysis, attack chains, and AI agent blast-radius reporting, each finding with an AWS CLI and Terraform fix.
A curated, community-maintained list of Kubernetes resources including tools, books, tutorials, and cloud provider links.
Open-source cloud cost estimation for Terraform, Terragrunt, CloudFormation and AWS CDK, shown before infrastructure changes are deployed.