terragrunt-validator

You can validate and secure Terragrunt HCL configurations by running a staged workflow that checks HCL formatting, verifies dependency graphs, and scans for security issues before infrastructure deployment.

Terragrunt dependency graph verification detects broken wiring and circular dependencies using Terragrunt DAG graph checks across multi-module stacks to ensure infrastructure deployment order is correct.

Linting Terragrunt HCL files for multi-module stacks involves checking HCL formatting and validating inputs for terragrunt.hcl and root.hcl files to prevent misconfigurations before CI or apply time.

Yes, the validation workflow supports custom providers and modules by performing documentation lookup via Context7 or web search for every detected custom resource, ensuring accurate validation checks for Terragrunt 0.93+.

You can skip specific validation stages during Terragrunt configuration checks by setting optional skip flags via environment variables, allowing you to bypass certain checks while maintaining deterministic validation scripting.

The best way to scan Terragrunt configurations for security misconfigurations is running configuration security scans that report findings with actionable remediation guidance, catching risks before they reach apply time.