PAGES
← all tools
◆ Cloud Security Posture

Steampipe

v2.3.0 open-source

Zero-ETL tool that queries APIs and cloud services in real-time using SQL via plugins that map APIs to database tables.

Summary

Steampipe is an open-source command-line tool that lets you query cloud APIs and services using SQL, exposing resources like AWS, Azure, or Kubernetes objects as queryable database tables through plugins. It runs as a single binary — install it locally with a package manager or shell script, run interactive queries, or drop it into a CI/CD pipeline — with no server to stand up, since it bundles its own Postgres instance. This fits cloud security and compliance teams who need to audit configuration across accounts and providers without writing bespoke API clients for each one, and platform engineers who want one query language across dozens of services. Its README frames it as the zero-ETL way to query APIs, distinguishing it from ETL pipelines or per-cloud CLI tools by treating live API data as SQL tables directly. With 58 contributors, 345 commits and 49 plugin and CLI releases in the past year, most recently 11 days ago, it is under active development.

Zero-ETL tool that queries APIs and cloud services in real-time using SQL via plugins that map APIs to database tables.

How Steampipe helps

Which Kubernetes workloads and cloud resources share the same misconfiguration?

joins tables from different plugins in one SQL statement, so a single query can compare pod specs against storage buckets or IAM policies side by side

Which S3 buckets, storage accounts, or security groups are open to the world right now?

queries the provider's live API at the moment the query runs and returns the current setting, not a cached snapshot from a prior scan

Who has access they shouldn't across my cloud accounts?

tables for IAM users, roles, and policies can be joined and filtered in one query to surface grants that don't match the access you expect

Are my different cloud accounts and providers configured consistently with each other?

the same SQL query runs against equivalent tables from AWS, Azure, Kubernetes, or other plugins, so differences show up as rows that don't match across providers

all 18 features, with the evidence for each →

Languages

Not documented

Features

18 capabilities · 2 backed by code, an API document or a real run

Built from Steampipe's releases, docs, README and our own runs. “Seen” marks the month we first spotted a release the vendor didn't date. Group names and tags are our labels.

Compare with peers →

  • Steampipe covers 1 of the 11 logs and telemetry capabilities we track.

What Steampipe offers you

  • Command-line interface8
  • Plugin system2
  • JSON data export1
All capabilities 18 capabilities
Cloud provider resource inspection shipped Provides tables and commands to inspect configuration, metadata, and state of resources across AWS, Azure, and GCP cloud providers. 28 releases · 3 other sources · first seen Jan 2024

release 28 total

  • gcp_dataplex_lake table added to list and inspect Dataplex lake resources 0.57.0 · Sep 2024 · source · release history
  • gcp_vpc_access_connector table added to query VPC Access connector details 0.57.0 · Sep 2024 · source · release history
  • gcp_dataplex_zone table added to list and inspect Dataplex zone resources 0.57.0 · Sep 2024 · source · release history
  • gcp_dataplex_asset table added to list and inspect Dataplex asset resources 0.57.0 · Sep 2024 · source · release history
  • gcp_composer_environment table added to query Google Cloud Composer environment configurations 0.57.0 · Sep 2024 · source · release history
  • gcp_dataplex_task table added to list and inspect Dataplex task resources 0.57.0 · Sep 2024 · source · release history

example

  • Query details of all Vertex AI models in a GCP project. select * from gcp_vertex_ai_model GCP plugin 0.50.0 · Mar 2024 · source
  • List all ACM Private CA certificate authorities in the current AWS profile. steampipe query "SELECT * FROM aws_acmpca_certificate_authority" AWS plugin 0.133.0 · Mar 2024 · source
  • Query GCP Cloud Asset Inventory using the new table steampipe query "select * from gcp_cloud_asset;" GCP plugin 0.48.0 · Jan 2024 · source
Caching and environment configuration shipped Enables control over caching behavior via SQL functions and environment variables, and supports silent plugin installation for CI environments. 9 releases · 3 other sources · first seen Aug 2022

release 9 total

  • Updates embedded database to PostgreSQL 14.19. v2.3.0 · Oct 2025 · source · release history
  • Installs FDW and embedded Postgres database from GHCR instead of GCP, reducing dependency on GCP infrastructure. v0.24.0 · Sep 2024 · source · release history
  • Improve startup performance with high plugin count - parallelize plugin startup v0.22.1 · Mar 2024 · source · release history
  • Re-adds support for the legacy command-schema configuration format v0.20.2 · May 2023 · source · release history
  • Adds a --progress flag to plugin install to disable progress bars v0.20.0 · May 2023 · source · release history
  • Adds steampipe_connection_state table to indicate the loading state of connections v0.20.0 · May 2023 · source · release history

example

  • Disable caching for both the service and client by setting the environment variable. export STEAMPIPE_CACHE=disabled && steampipe serve v0.20.0 · May 2023 · source
  • Install plugins silently in CI environments by suppressing progress output. steampipe plugin install aws --progress=false v0.20.0 · May 2023 · source
  • Query connection states directly from SQL without relying on CLI status commands. SELECT * FROM steampipe_connection_state; v0.20.0 · May 2023 · source
Connection and plugin management configuration shipped Allows granular control over plugin instances, connection schemas, rate limiting, and service configuration including async loading and dynamic schema updates. 10 releases · 2 other sources · first seen Jan 2021

Also counts toward: Plugin system

release 10 total

  • Adds ability to configure plugin startup timeout, giving operators control over slow-starting plugins. v0.24.0 · Sep 2024 · source · release history
  • Removed support for the deprecated max_parallel property within general options. v0.22.0 · Mar 2024 · source · release history
  • Adds new introspection tables steampipe_plugin, steampipe_plugin_limiter, and steampipe_server_settings to query configured plugin instances, limiters, and server settings respectively. v0.21.0 · Oct 2023 · source · release history
  • Enables defining rate and concurrency limits for plugin execution via the limits key within plugin instance definitions or a new top-level options.plugin block. v0.21.0 · Oct 2023 · source · release history
  • Adds plugin connection config block allowing multiple instances of a plugin version to be defined in .steampipe/config/plugins.hcl. v0.21.0 · Oct 2023 · source · release history
  • Add support for import_schema property in connection config, controlling whether to create a postgres schema for a steampipe connection v0.20.0 · May 2023 · source · release history

example

  • Query the new introspection table to see all configured plugin limiters. steampipe query "SELECT * FROM steampipe_plugin_limiter;" v0.21.0 · Oct 2023 · source
  • Allow concurrent queries by starting the background service first. steampipe service start v0.0.16 · Jan 2021 · source
Query execution tracing and metadata shipped Provides visibility into query performance, execution history, and system state through OpenTelemetry tracing, timing data, and introspection tables. 8 releases · 3 other sources · first seen Jun 2022

Shared capability: Distributed tracing

release 8 total

  • Displays a startup message indicating whether Steampipe launched its own Postgres instance or connected to an existing service. v2.2.0 · Sep 2025 · source · release history
  • Adds support for verbose timing information v0.23.0 · May 2024 · source · release history
  • Introduce SQL functions meta_cache() and meta_cache_ttl() to easily manipulate caching functionality v0.20.0 · May 2023 · source · release history
  • Updates in cache configuration to allow disabling of all caching on server via the STEAMPIPE_CACHE environment variable v0.20.0 · May 2023 · source · release history
  • Adds support for aggregator connections with dynamic tables to combine multiple child connections. v0.19.0 · Mar 2023 · source · release history
  • Adds Open Telemetry support for tracing queries. v0.15.0 · Jun 2022 · source · release history

example

  • Run dashboard panels in parallel to speed up execution, leveraging the new default concurrency of 10. steampipe dashboard run --max-parallel 20 v0.18.0 · Jan 2023 · source
  • Enable OpenTelemetry tracing for a steampipe query execution. OTEL_SERVICE_NAME=steampipe OTEL_TRACES_EXPORTER=otlp steampipe query 'select * from aws_ec2_instance' v0.15.0 · Jun 2022 · source
  • Query the scan metadata to see how many hydrate functions were called for a specific check. steampipe check my_control --output json > /tmp/timing.json && steampipe query 'select * from steampipe_command.scan_metadata where timing_file = '"'"'/tmp/timing.json'"'"'' v0.15.0 · Jun 2022 · source
Dashboard and control execution enhancements shipped Improves dashboard and control capabilities with parallel execution, reusable data structures via `with` blocks, graph visualizations, runtime parameters, and detailed logging. 8 releases · 2 other sources · first seen Aug 2022

Also counts toward: Command-line interface

release 8 total

  • Add dashboard panel log to panel detail to get an understanding of the execution history of a panel v0.18.0 · Jan 2023 · source · release history
  • Add a --max-parallel flag to dashboard command and set default to 10 v0.18.0 · Jan 2023 · source · release history
  • Adds support for graph visualisations of your data with easily composable data structures using nodes and edges v0.18.0 · Jan 2023 · source · release history
  • Add support for param runtime dependencies v0.18.0 · Jan 2023 · source · release history
  • Exit codes have been updated to specific constants (e.g. ExitCodeControlsAlarm = 1, ExitCodeQueryExecutionFailed = 41) replacing previous logic v0.18.0 · Jan 2023 · source · release history
  • Add support for with blocks v0.18.0 · Jan 2023 · source · release history

example

  • Use with blocks in your HCL configuration to define reusable data structures for queries. # Example HCL snippet mod "example" { with "my_data" { source = query.my_query } } v0.18.0 · Jan 2023 · source
  • Run dashboard panels in parallel to speed up execution, leveraging the new default concurrency of 10. steampipe dashboard run --max-parallel 20 v0.18.0 · Jan 2023 · source
Plugin installation and introspection shipped Provides updated mechanisms for installing plugins from mod files without generating default configs, and querying plugin metadata and versions via SQL. 6 releases · 1 other source · first seen Oct 2023

Also counts toward: Command-line interface

release

  • Adds the version column to the steampipe_plugin table to inspect installed plugin versions via SQL queries v0.22.0 · Mar 2024 · source · release history
  • Removed the deprecated version property from the mod require block in .steampipe/mods/spmpc/*.spmod.json. v0.22.0 · Mar 2024 · source · release history
  • Adds skip-config flag to steampipe plugin install to prevent writing default plugin configuration during installation. v0.21.0 · Oct 2023 · source · release history
  • Adds new introspection tables steampipe_plugin, steampipe_plugin_limiter, and steampipe_server_settings to query configured plugin instances, limiters, and server settings respectively. v0.21.0 · Oct 2023 · source · release history
  • Adds --output json flag to steampipe plugin list command to export plugin data in JSON format. v0.21.0 · Oct 2023 · source · release history
  • The deprecated workspace-chdir flag has been removed. v0.21.0 · Oct 2023 · source · release history

example

  • Check the installed version of the AWS plugin directly via the CLI. steampipe query "select version from steampipe_plugin where name = 'aws'" v0.22.0 · Mar 2024 · source
Mod management verified Allows users to install, update, and uninstall Steampipe mods and their dependencies from the command line. 2 releases · 4 other sources · first seen Jun 2022

Also counts toward: Command-line interface

release

  • Updates steampipe mod update to propagate changes into transitive dependencies, resolving variables via parent mod require block args. v0.20.6 · Jun 2023 · source · release history
  • Adds --show-password CLI flag to reveal the database user password, disabling visibility by default. v0.15.0 · Jun 2022 · source · release history

command line

example

  • Reveal the password used for the internal database connection during a check run. steampipe check my_check --show-password v0.15.0 · Jun 2022 · source
Output formatting and error handling shipped suggested Improves output clarity by directing errors to stderr, supporting JSON output for plugin lists, and enabling pprof profiling. 3 releases · 1 other source · first seen Oct 2023

Suggested capability: Log routing. This is our guess, not confirmed.

Also counts toward: Command-line interface, JSON data export

release

  • Directs all error messages and warnings to standard error (stderr) for cleaner stdout output in pipelines v0.22.0 · Mar 2024 · source · release history
  • Allow using pprof on FDW when STEAMPIPE_FDW_PPROF environment variable is set v0.21.3 · Jan 2024 · source · release history
  • Adds --output json flag to steampipe plugin list command to export plugin data in JSON format. v0.21.0 · Oct 2023 · source · release history

example

  • Filter only error logs from a scan by redirecting stderr to a file while keeping valid SQL output on stdout. steampipe query "select 1" 2> steampipe_errors.log v0.22.0 · Mar 2024 · source
Service connectivity and configuration updates shipped Updates service binding, environment variables, and cloud integration flags to reflect new naming conventions and listen host settings. 4 releases · first seen Oct 2023

release

  • Deprecated cloud-host and cloud-token CLI args are replaced with pipes-host and pipes-token respectively; old flags will no longer work. v0.22.0 · Mar 2024 · source · release history
  • Deprecated cloud_host and cloud_token workspace config keys are replaced with pipes_host and pipes_token; old keys will be ignored. v0.22.0 · Mar 2024 · source · release history
  • Deprecated STEAMPIPE_CLOUD_HOST and STEAMPIPE_CLOUD_TOKEN environment variables are replaced with PIPES_HOST and PIPES_TOKEN; old vars will be ignored. v0.22.0 · Mar 2024 · source · release history
  • Enables selecting listen hosts for the steampipe service via the listen_hosts setting in the server configuration. v0.21.0 · Oct 2023 · source · release history
Enhanced JSON output metadata shipped Extends JSON query output to include top-level column metadata (names and types) to handle duplicate columns and support type-aware processing. 2 releases · 1 other source · first seen Sep 2024

release

  • Enriches --output json query results with a new columns property containing column name and data type metadata, enabling correct handling of duplicate column names. v0.24.0 · Sep 2024 · source · release history
  • The JSON output format for steampipe query --output json now includes a top-level columns array alongside rows; scripts or tools that parse the JSON output and expect only a rows key will need to be updated. v0.24.0 · Sep 2024 · source · release history

example

  • Parse column type metadata from query results — useful when scripting against APIs that return duplicate column names or when you need data-type-aware processing. steampipe query "select account_id, arn from aws_account" --output json | jq '.columns' v0.24.0 · Sep 2024 · source
Interactive SQL shell shipped Provides a command-line interface to open an interactive session for entering and executing SQL queries directly. 1 release · 2 other sources · first seen Jan 2021

Also counts toward: Command-line interface

release

  • Adds autocomplete support for meta-commands in the CLI v0.0.16 · Jan 2021 · source · release history

example

  • Enable tab-completion for meta-commands to speed up interactive sessions. steepipe --autocomplete v0.0.16 · Jan 2021 · source
  • Open interactive SQL query shell steampipe query
Plugin schema and column inspection shipped Allows programmatic inspection of plugin schemas and columns via SQL tables and CLI commands. 1 release · 1 other source · first seen Dec 2023

Also counts toward: Command-line interface

release

  • steampipe_plugin_column is now available in the steampipe_internal schema v0.21.2 · Dec 2023 · source · release history

example

  • List column definitions for any plugin to inspect its schema programmatically. steampipe query 'SELECT * FROM steampipe_internal.steampipe_plugin_column' v0.21.2 · Dec 2023 · source
Plugin management commands shipped Provides CLI commands to check installed plugin versions and install new plugins for specific services. 2 other sources

Also counts toward: Command-line interface, Plugin system

example

  • Install a plugin for a service steampipe plugin install hackernews
  • Check installed Steampipe version steampipe --version
Plugin manager verified Provides a plugin manager process to coordinate plugin lifecycle within the tool. 1 other source · first seen Oct 2025

command line

Dynamic credential resolution shipped Enables the use of context functions within connection configuration files to resolve credentials dynamically at runtime. 1 release · first seen Sep 2025

release

  • Supports context functions inside Steampipe connection config files, enabling dynamic credential resolution at runtime. v2.2.0 · Sep 2025 · source · release history
Dashboard nesting support shipped Allows dashboards to be composed within other dashboards, enabling hierarchical organization of controls and data views. 1 release · first seen Apr 2024

release

Mod variable resolution shipped Enables setting and resolving mod variable values using fully qualified names in root and top-level dependency mods. 1 release · first seen Jun 2023

release

  • Adds support for setting variable values using fully qualified names (e.g., mod::var) in the root or top-level dependency mods. v0.20.6 · Jun 2023 · source · release history
Dashboard panel parallel execution shipped Enables running dashboard panels in parallel with a configurable max concurrency limit to speed up execution. 1 release · first seen Jan 2023

Also counts toward: Command-line interface

release

  • Add a --max-parallel flag to dashboard command and set default to 10 v0.18.0 · Jan 2023 · source · release history

Lines in monospace are the tool's own words: help text parsed from its source, or an endpoint from its API document. Under release, a line is our summary of a dated release. Under docs, it is quoted from the tool's own documentation or website. Each links back to the source it came from.

Score card

  1. Shipping velocity releases a month, last 12 months
  2. Documentation quality release-notes rubric, 0–100
  3. Breaking-change discipline how rarely a release breaks users, and notice given
  4. Maintenance risk quiet time against its own cadence, maintainers
  5. Innovation & surface new capabilities, API and MCP surface
  6. Community health
  7. Contributor trend distinct committers, this year against last
  8. Maintainer concentration bus factor now against a year ago
  9. Issue backlog trend issues closed per issue opened, 12 months
  10. Responsiveness median time to a maintainer’s first reply

Nine scores for Steampipe, each built from the releases, notes and API history this site tracks — and, on Researcher and Business, where it stands among every measured tool in its category and how that has moved.

Score cards are part of every paid plan.

See plans →

Each score is 0–100 on a published rubric, derived from data this site already shows. A dimension we cannot measure says so — it is never scored 0 and never enters a rank.

How this is scored
  • Shipping velocity — releases a month over the last 12 months, on a log scale where 16 a month scores 100. Needs 3 releases in the window.
  • Documentation quality — the release-notes rubric published on the analytics page, unchanged.
  • Breaking-change discipline — the share of releases carrying a breaking change (none scores 100, half or more scores 0). Only projects that label breaking changes are measured: a clean record cannot be told from an unlabelled one.
  • Maintenance risk — quiet time measured against the tool's own release cadence (quiet longer than 90 days and three typical gaps scores 0), plus the number of active maintainers and whether contributors are growing, where known. Higher is lower risk.
  • Innovation & surface — new capabilities in the feature ledger this year, API and MCP operations added, and the share of commits that are features: the mean of whichever we hold.
  • Community health (open-source tools only) — each is a direction, not a size: contributors this year against last, the bus factor now against a year ago, and issues closed per issue opened, where steady scores 50, doubled 100 and halved 0; plus the median time to a maintainer's first reply (an hour scores about 100, a month or more 0). A commercial card has no repository and carries none of the four.
  • Documented delivery (commercial tools) — when a vendor's documented new capabilities have slowed against its own baseline, that counts against the overall standing as heavily as two low dimensions. Steady delivery, or too little history to judge, leaves the standing alone; it is never a sixth score.
  • Open-source tools are scored on repository signals; commercial tools on their published changelog. Ranks compare tools within one category and one profile and need at least five measured peers; the overall standing needs three ranked dimensions. Best-in-breed or consolidator is a shape, not a quality, and is never scored.

Release-note detail over time

See how much detail Steampipe puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.

Checking release-note history…

Explore the full chart →

Website history

steampipe.io, every change

Turbot's home page and 9 more pages as they looked each month from September 2021 to October 2026: 21 renders, 5 changes of tagline or palette. Step through them, play them, or put any two months side by side.

Website history is included with Researcher and Business.

See plans →

Releases

Show

26 entries

  1. October 20251
  2. September 20251
  3. September 20242
  4. May 20241
  5. April 20241
  6. March 20246
  7. February 20241
  8. January 20243
  9. December 20231
  10. October 20231
  11. June 20231
  12. May 20232
  13. March 20231
  14. January 20231
  15. August 20221
  16. June 20221
  17. January 20211
    Show

    26 entries

    Project health

    Issue, contributor and maintainer activity in turbot/steampipe, 2023-10 – 2026-09, as of 2026-09-25. Twelve-month figures first; the trend lines run the whole window.

    1. Contributors 7 −4 vs prior 12 months
    2. Maintainers 3 +2 joined · −1 left, last 12 months
    3. Bus factor 1 committers behind half the commits
    4. Community-filed 100% of issues opened, last 12 months
    5. Median time to close 4.5 days first maintainer reply 5.3 days
    6. Open backlog 5 of 2,315 issues ever filed
    1. Issues opened / month 1 · 0 communitymaintainers
    2. Open backlog 5
    3. Contributors / month 2
    4. Commits / month 6
    5. Stars 7,957
    Issue themes, last 12 months
    • bugs 72%
    • features 7%
    • docs 1%
    • other 20%

    Counts from the project's public repository and git history; no individuals are identified. Maintainers are the committers covering 80% of the last year's commits. how we measure this

    Add the badge to your README

    Maintain this project? The badge links readers straight to this page, so they can follow every release here.

    Tracked by Cyber Toolchain Choose a badge style and copy the code →
    browse all tools → score card for your toolchain →