antonbabenko/pre-commit-terraform
Pre Commit Terraform
This project is a set of git pre-commit hooks designed to automate the formatting, linting, and validation of Terraform configurations. It functions as an infrastructure as code linter, security scanner, cost estimator, and documentation generator to ensure code quality before commits are finalized.
The tool distinguishes itself by providing specialized capabilities for infrastructure workflows, such as scanning templates for security vulnerabilities and hardcoded secrets, calculating projected cloud spending against budgets, and automatically extracting module definitions to populate readme files.
The broader capability surface covers infrastructure code formatting for Terraform and YAML files, dependency management for provider lockfiles and version constraints, and syntax validation for both Terraform and Terragrunt inputs.
Features
- Git Pre-Commit Hooks - Provides a series of git pre-commit hooks to automate formatting, linting, and validation of Terraform configurations.
- Infrastructure as Code Linters - Provides a comprehensive suite for analyzing Terraform files to detect syntax errors and style violations.
- Configuration File Formats - Rewrites infrastructure configuration files into a canonical format to ensure consistent styling.
- Configuration File Validators - Validates the syntax and settings of Terraform configuration files to prevent invalid commits.
- Formatting Configurations - Automatically standardizes the style and layout of configuration files before committing code.
- Pre-commit Hooks - Implements a series of git hooks to automate formatting and validation before code is committed.
- Terraform Analyzers - Analyzes Terraform configurations for syntax errors, style violations, and logical inconsistencies.
- Static Code Linting - Scans configuration files for coding errors and style violations using automated linting tools.
- Syntax Validation - Verifies infrastructure configuration files for syntax errors and logical validity before commits.
- Infrastructure Code Formatters - Standardizes the layout and style of Terraform configuration files to ensure consistency across the project.
- Infrastructure Configuration Validations - Checks for misconfigurations and formatting errors in infrastructure deployment settings.
- Secrets Scanning - Scans files for hardcoded private keys and cloud credentials to prevent sensitive information leaks.
- Security Vulnerability Scanning - Scans infrastructure templates for security vulnerabilities and compliance violations using static analysis.
- Static Analysis Security Testing - Analyzes infrastructure configuration files without executing them to detect security vulnerabilities and syntax errors.
- Infrastructure Configurations - Automatically standardizes the layout and style of Terraform and YAML configuration files.
- Configuration File Linting - Analyzes configuration files for stylistic errors and violations of industry best practices.
- Automated Document Generation - Automatically updates readme files by inserting input and output documentation based on current module definitions.
- Infrastructure Configuration Documentation - Provides automated generation of module input and output tables within project readme files.
- Module Documentation Generators - Automatically extracts module definitions to populate input and output tables within project readme files.
- Lockfile Reconciliation - Synchronizes provider signatures in dependency lock files to ensure cross-platform compatibility.
- Lock File Updates - Refreshes provider signatures in dependency lock files to maintain consistency across environments.
- Documentation Generators - Automatically generates and updates module input and output documentation in readme files.
- General YAML Syntax Validation - Checks YAML configuration files for structural errors, indentation, and truthy values.
- Documentation Automation - Automates the extraction of input and output definitions from modules into readme files.
- Infrastructure Cost Estimators - Calculates projected cloud spending by analyzing configuration code and comparing totals against budget limits.
- Dependency Version Updates - Refreshes version requirements for tools, providers, and modules to the latest compatible releases.
- Infrastructure Security Scanners - Evaluates infrastructure templates against security best practices to find vulnerabilities and secrets.
- Configuration Variable Detections - Detects unused or undefined inputs in Terragrunt configurations to maintain accurate variable sets.
- Infrastructure Variable Validations - Identifies unused or undefined input variables in Terragrunt configurations.
- Workflow Automation - Git hooks for formatting, validation, and security.
- Workflow Utilities - Git hooks for formatting, validation, and security.
