terraform-validator

To validate Terraform configurations, you can run syntax checks with terraform validate, format with terraform fmt, and scan .tf files for security gaps using Checkov via provided wrapper scripts to prevent insecure deployments.

Yes, Checkov scans Terraform files including .tfplan for governance issues. The skill uses a dedicated run_checkov.sh wrapper to automate security checks across repositories, extracting metadata to detect misconfigurations before applying.

You extract Terraform module and provider metadata by running the extract_tf_info_wrapper.sh script. This parses .tf and .tfvars files to output structural information required for documentation and infrastructure governance.

Yes, you need python3 and python-hcl2 to lint Terraform infrastructure code. These dependencies parse HCL2 syntax required by the validation scripts and Checkov security scans to accurately analyze configurations.

The best way to secure Terraform infrastructure as code is applying automated validation pipelines. This skill combines terraform fmt, terraform validate, and Checkov security scans to enforce formatting and detect insecure deployments across repositories.

Terraform validate may fail on .tfvars files due to syntax errors or misconfigurations. This skill initializes with terraform init and applies formatting checks to ensure structure and syntax meet best practices before deployment.