terraform-plan-review

Reviewing a Terraform plan for destructive operations requires parsing the machine-readable plan JSON output to identify resource destruction, replacement, or identity churn. The analysis automatically evaluates resource changes against safety criteria to prevent data loss.

Blast radius analysis in infrastructure as code identifies the potential impact of changes by detecting high-risk operations like resource destruction or replacement. It evaluates Terraform plan JSON to ensure stateful resources such as databases are not accidentally destroyed.

Yes, you can use this Terraform plan analysis in a CI/CD pipeline. It is designed to parse plan JSON files and apply safety and compliance criteria to infrastructure changes, providing a go or no-go verdict to gate production deployments.

Yes, this tool detects security vulnerabilities and secret exposure in OpenTofu plans. It analyzes the plan JSON output to validate module structure against best practices and identify potential secret exposure before the changes are applied.

Preventing configuration drift involves analyzing Terraform and OpenTofu plan files to catch state risks before applying changes. By providing a rigorous diagnostic review of the plan JSON, it stops unwanted modifications from reaching production environments.