Tracked topic
… For VS Code, you can install the official Terraform extension from HashiCorp. To test and apply your Terraform plans, install Terraform in your terminal and any necessary provider SDKs. …
… Infrastructure as code: Terraform and OpenTofu Terraform state and .tfvars files are a common source of leaked credentials because secrets end up written to disk or checked into version control by accident. …
… The recently announced Terraform Cloud application provides users with additional automation and collaboration capabilities on top of Terraform, such as remotely managing and version that state file, executing Terraform runs plan/apply remotely, and allowing teams to comment and collaborate on Terr… …
… Inspect tfsec –help to get a list of all available parameters and try generating JSON and JUnit output files to process further. $ tfsec terraform/aws --format json --out tfsec-report.json 1 file s written: tfsec-report.json $ tfsec terraform/aws --format junit --out tfsec-junit.xml 1 file s writte… …
… Watch my video on custom roles and granular security permissions with GitLab: Granular permissions As of the GitLab 16.8 release, the following granular permissions can be added to any base role: Viewing project code Viewing vulnerability reports Changing the status of vulnerabilities Viewing SBOMs… …