terraform-validator

What problem does it solve?

Terraform infrastructure code often lacks validation, linting, and security checks, leading to misconfigurations and insecure deployments. The Terraform Validator skill provides a comprehensive toolkit to automatically validate, format, lint, and scan Terraform configurations to detect issues before applying.

Core Features & Use Cases

• Validate syntax and structure of .tf and .tfvars files across repositories.
• Lint and format Terraform code to enforce best practices using terraform fmt and tflint where available.
• Perform security checks with Checkov and automated scans via the provided wrapper scripts.
• Use with Terraform modules and providers by extracting metadata (providers, modules) for documentation and governance.

Quick Start

Use the terraform-validator to analyze a Terraform project with the included wrappers:

• Run: bash scripts/extract_tf_info_wrapper.sh <path> to extract metadata
• Run: bash scripts/run_checkov.sh <path> to perform security scans
• Review the results and remediation guidance in references.