Issue #173 - Semgrep for Terraform Security, Terraform Plan Comment, OpenTofu ContributorsPledged, Terraform Textual UI

May 15, 2024 | Read Online

Terraform Weekly Sponsor

Terramate enables teams to build, deploy, manage and observe cloud infrastructure with Terraform, OpenTofu and Terragrunt in GitHub Actions and GitLab CI/CD.#### Articles 📚

Semgrep for Terraform Security

Rami McCarthy demonstrates the features of Semgrep that can help improve the security of Terraform configurations. AB: Semgrep is a good one. If you consider switching to Semgrep, make sure you learn about its Terraform peculiarities and use playground.

ramimac.me/semgrep-for-terraform

Terraform Plan Comment - GitHub Marketplace

Oliver Borchert created a GitHub Action that posts the output of terraform plan to a pull request comment. AB: There are several similar scripts/actions, but this one visualizes it very nicely. Agree?

github.com/marketplace/actions/terraform-plan-comment

[Current OpenTofu contributors vs. pledged FTEs

Cristian Măgherușan-Stanciu posted an analysis of Opentofu GitHub stats compared to the pledged resources when they forked Terraform half a year after the fork. AB: “Pledge” does not mean “do it for real” :)

leanercloud.beehiiv.com/p/current-opentofu-contributors-vs-pledged-ftes

](https://link.mail.beehiiv.com/ss/c/u001.8PxeVuEC0VvOO6bad46AUQLqOgrV1un1fB-CUv66TA-wMUpd_CSU94Yrnkj_qbJlN_-r4fVgl4PYi_kb9gcgu63NQu-rq9rIIiOMaj3bIpc-Zxy34kNecfa8DNk43UUDcFDrL_d19T4j5XmpBLa3kJpW1Ex_9Ebji9pUTjhTWEbmiJRevO11yovFCSGddRt-OUA3Y2Gd2j5FD5WCm-396qhNs3j2XueLTBOM6iaTdzhPr8zxhXnFPovdeHIypBIZN7WwzB_vIgmLjNzyTAfRxjE0-fYf3NmKb0ZYWJwx2atgON9cqhyy3RzL6vkidC0WfBlGSpTrgVEodbGXQzjGyfJo6PYxDtogEmQyOPFWIPc/46d/Nd507VXhQNiLSHvnSAdXBg/h10/h001.QiHr0T5NZrRY8J-Cz_7GiXf4Uc4NCjj9DeOwF8Se_W4)[How To Execute Terragrunt Commands Dynamically Based on Directory Changes?

Ekant Mate describes how to run required Terragrunt commands only in changed places using Codefresh, but it can be easily updated to use another tool, too.

levelup.gitconnected.com/how-to-execute-terragrunt-commands-dynamically-based-on-directory-changes-afbc16101a85

](https://link.mail.beehiiv.com/ss/c/u001.8PxeVuEC0VvOO6bad46AUdmSIMvPOGFs_MH4cs3mtvtci1ezKHjGD0wrecSqBQhlHxar-fJP4XMDCkWrwzgXcEmNMqI4pFhM98pdCkbNQgwIKApHhfYfbeuyC39g-Q96SYfZQjwMpdXERZ18SBve_rd0P8nFwo1KW3nDbICKBrD3L9itpdKxNjj9HMlAKi30Rs_4cyMkMoqWZRSi_kA7cLezO_buINvbUrElw3Ts-RT83WSinfRzF61DNYdHScnlm4L7ZeEGYyenXXisAqiLd88KicZppbqDw_5Bt0GxpinQSvPmtUWS1-U-ZSJbxGd6T-u530YnYcAAua-FwwOVC9zUB73EtwditAsUjFtgWPfGtj8YXpYn2Dl8LQYnhdtSDznRTDP8k6qTuqYMeQaED31MG9evc0Fs88s4NM1hF0UeaSnLmbf1FZc39G2d-0_BZ561Q4As4ldWRZECekYelMda1gfhhylNPVTMRYWbpzk/46d/Nd507VXhQNiLSHvnSAdXBg/h12/h001.V10KYr3ZR3qLw6gZ3JaKg_0c6vZRgg7IJYCldy2cLOY)[Automate Your GitHub Setup: Managing Your Account with Infrastructure as Code

Ibukun Dairo describes how to maintain your GitHub projects with Infrastructure as Code. He included GitHub setup, various scripts, and Terraform tests.

blog.ibukundairo.com/automate-your-github-setup-managing-your-account-with-infrastructure-as-code-ee0c08f0a601](https://link.mail.beehiiv.com/ss/c/u001.qZ5vh-HaCLAsyqPyzJUHdPDXuTkEIohHbI21prZmijJqDKzTkyMPEELtuARPMAQ5gN88S1EiDo75HL_xKyIJaQ0hnymT0ypfNCLfq4_MyQNFomOZ4zR1DG9uZ3xuZhwk6f5QRgWEr55xVCIB0ty5jJkWec6NrI4k2cw5lQghzzgrEoiSbN49lXswf6mgVRZ5nGW7B5nW4vdIKaUyUvGV6qXj74Uin4xFsQP7xjOMF-h0mM39pE65Z9-vVD1fESgc7W6U6Z7VzF9_MdXEQQMJTXzCpqEZoYju-wOyw8hH2Hu-He-SesN99vUpTUyD7OrI3Swv66oXTZQLmIE8kXWtMBzDk941cA8_DBNUVZacACFW0o6RAEodcjonpl_lCXOpztUkh3XF0sAkxSYqB5TyRA/46d/Nd507VXhQNiLSHvnSAdXBg/h14/h001.aY9G_1dVs7sFt922QKaR0HB1luLr5aTKKAxYy7DN92E)#### Open-source projects 🤩

[[!] idoavrah/terraform-tui

Terraform textual UI.

github.com/idoavrah/terraform-tui

](https://link.mail.beehiiv.com/ss/c/u001.PHVYT_EcPasyMC5lWMEoDt-SSSavMptiPAh4UPbGur2ziPB7O1rMd2pZekJYSxIwQRlZtFqVd_nOCGJF3m_sGobyBTbbZTWtFjzPY7wGsMTQ2V_li-EAuhbIStcogyPpYxBq_h4RHmGkpsPfBvRyNLxeIU9wN2QTkbbmwvouAErSRN4VeJBTnUO4bH-EuWrDbufwXb_pjIjWVbfEq_fxD8BvLUUWlTX--2yXJt-XhIsMliup6lvGcNhDUQXIvzs50gACbZnQ_NNMo_JrOP8D3rhAQftEYUABKn-DJnEHy_w/46d/Nd507VXhQNiLSHvnSAdXBg/h15/h001.jFnLSUREXPr7h4ImWWO2UkqRBezTwSy4XnghQsM6ARg)#### Feedback ❤️

If you have any feedback you want to share with me or if you want to sponsor this weekly newsletter, please do so by reaching out via Twitter, LinkedIn, or replying to the email.

Remember that sharing is caring, so it will help the Terraform community (and me) if you share this newsletter with your friends and colleagues.

PS: One of the best ways to help Ukraine is https://palianytsia.com.ua/

Glory to Ukraine! 🇺🇦

Update your email preferences or unsubscribe here

© 2024 Terraform Weekly

228 Park Ave S, #29976, New York, New York 10003, United States

Powered by beehiiv

May 15, 2024   |   Read Online Terraform Weekly Sponsor Terramate enables teams to build, deploy, manage and observe cloud infrastructure with Terraform, OpenTofu and Terragrunt in GitHub Actions and GitLab CI/CD. Articles 📚 Semgrep for Terraform Security Rami McCarthy demonstrates the features of Semgrep that can help improve the security of Terraform configurations. AB: Semgrep is a good one. If you consider switching to Semgrep, make sure you learn about its Terraform peculiarities and use playground. ramimac.me/semgrep-for-terraform Terraform Plan Comment - GitHub Marketplace Oliver Borchert created a GitHub Action that posts the output of `terraform plan` to a pull request comment. AB: There are several similar scripts/actions, but this one visualizes it very nicely. Agree? github.com/marketplace/actions/terraform-plan-comment Current OpenTofu contributors vs. pledged FTEs Cristian Măgherușan-Stanciu posted an analysis of Opentofu GitHub stats compared to the pledged resources when they forked Terraform half a year after the fork. AB: “Pledge” does not mean “do it for real” :) leanercloud.beehiiv.com/p/current-opentofu-contributors-vs-pledged-ftes How To Execute Terragrunt Commands Dynamically Based on Directory Changes? Ekant Mate describes how to run required Terragrunt commands only in changed places using Codefresh, but it can be easily updated to use another tool, too. levelup.gitconnected.com/how-to-execute-terragrunt-commands-dynamically-based-on-directory-changes-afbc16101a85 Automate Your GitHub Setup: Managing Your Account with Infrastructure as Code Ibukun Dairo describes how to maintain your GitHub projects with Infrastructure as Code. He included GitHub setup, various scripts, and Terraform tests. blog.ibukundairo.com/automate-your-github-setup-managing-your-account-with-infrastructure-as-code-ee0c08f0a601 Open-source projects 🤩 [!] idoavrah/terraform-tui Terraform textual UI. github.com/idoavrah/terraform-tui Feedback ❤️ If you have any feedback you want to share with me or if you want to sponsor this weekly newsletter, please do so by reaching out via Twitter, LinkedIn, or replying to the email. Remember that sharing is caring, so it will help the Terraform community (and me) if you share this newsletter with your friends and colleagues. PS: One of the best ways to help Ukraine is https://palianytsia.com.ua/ Glory to Ukraine! 🇺🇦   Update your email preferences or unsubscribe here © 2024 Terraform Weekly 228 Park Ave S, #29976, New York, New York 10003, United States Powered by beehiiv