terraform-azurerm-set-diff-analyzer

False-positive diffs in AzureRM plans occur when Set-type attributes report order-only changes despite identical resource state. This analyzer distinguishes order-only diffs from real changes by recursively comparing before/after states against a reference mapping of AzureRM Set attributes, reducing noise in CI/CD reviews.

Yes. This tool handles nested Set attributes across common AzureRM resources including Application Gateway, Load Balancer, NSG, Front Door, and firewall. It requires Python 3.8+, reads external attribute definitions from a JSON reference file, and outputs a concise report distinguishing real changes from false positives.

Integrate plan analysis into your CI/CD pipeline to filter Set-type false positives before PR review. This analyzer parses plan.json, applies AzureRM Set-attribute logic, and produces a filtered report so reviewers focus only on actual resource changes, accelerating approval workflows.

Yes. The tool integrates with CI/CD pipelines by accepting plan.json as input and generating a report of order-only versus real diffs. It runs on Python 3.8+, requires no external dependencies, and references azurerm_set_attributes.json to map Set attributes for accurate analysis.

AzureRM Set-type attributes are order-sensitive in plan output even when their content is logically identical. Terraform reports these order-only changes as diffs, creating false positives. This analyzer detects and filters these cases by comparing actual state values rather than relying on plan ordering.

Application Gateway, Load Balancer, NSG, Front Door, and firewall resources commonly exhibit Set-type false positives. This analyzer handles nested Set attributes across these and other AzureRM resources, enabling faster decision-making in plan reviews without manual filtering.