opentofu-qa

Run automated OpenTofu/Terraform QA checks and generate qa_report.md.

Updated Oct 27, 2025
One-click install
npx skills add https://github.com/jswank/opentofu-qa-skill --skill opentofu-qa
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: opentofu-qa
Source: https://github.com/jswank/opentofu-qa-skill/tree/main
Command: npx skills add https://github.com/jswank/opentofu-qa-skill --skill opentofu-qa

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

OpenTofu/Terraform code quality is hard to guarantee across reviews and deployments; this skill automates a suite of QA checks to catch formatting, validation, linting, and security issues early, reducing risk and rework.

Core Features & Use Cases

  • Automates tofu fmt formatting checks, tofu validate configuration, tflint linting, and trivy security scans.
  • Generates a consolidated qa_report.md for traceability, reporting, and remediation tracking.
  • Ideal for code reviews, pre-commit validation, and CI pipelines to enforce IaC quality standards.

Quick Start

Run the QA runner against your repository with python scripts/qa_runner.py [target_directory].

Frequently Asked Questions about opentofu-qa

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate Terraform code review and security checks in CI?

Run automated QA checks for OpenTofu and Terraform by executing tofu fmt, tofu validate, tflint, and trivy across your modules. This generates a consolidated qa_report.md for tracking formatting, validation, linting, and security issues in code review and CI workflows.

What does tflint and trivy validate in OpenTofu infrastructure as code?

Tflint checks OpenTofu and Terraform configurations for linting issues, while trivy scans infrastructure as code for security vulnerabilities. They validate code quality and compliance by detecting configuration errors and security risks before deployment.

Can I use this automated QA runner for pre-commit validation on Terraform modules?

Yes, you can run automated OpenTofu and Terraform QA checks for pre-commit validation by executing python scripts/qa_runner.py [target_directory]. This applies formatting, validation, linting, and security scans to enforce quality standards before committing changes.

Does this OpenTofu QA skill require any external dependencies to run?

The OpenTofu QA skill has no external dependencies listed. It runs automated checks using tofu fmt, tofu validate, tflint, and trivy, relying only on your target directory's infrastructure as code files to generate the QA report.

What's the best way to generate a compliance report for OpenTofu infrastructure as code?

Generate an OpenTofu infrastructure as code compliance report by running tofu fmt, tofu validate, tflint, and trivy checks. The results are consolidated into a qa_report.md file for traceability and remediation tracking across repositories.