Skip to content

Releases: adityacodes-root/Preflight

v0.1.0 - Initial Release

Choose a tag to compare

@adityacodes-root adityacodes-root released this 28 Oct 19:39

Preflight is a lightweight, zero-dependency policy engine that analyzes Terraform to catch destructive changes, security misconfigurations, and blast-radius spikes in CI/CD before they reach production.

Key Capabilities

  • Multi-cloud detection rules covering AWS, Azure, Google Cloud, and Kubernetes.
  • Deterministic risk scoring with logarithmic blast-radius calculations.
  • Direct stdin streaming support: terraform show -json tfplan | preflight analyze - --fail-on high
  • Native CI/CD gate exit codes (0 = Pass, 1 = Policy Block, 2 = Error).
  • Flexible report formats: Rich terminal summary, JSON, Markdown, and SARIF v2.1.0 for GitHub Code Scanning.
  • Automated GitHub Pull Request sticky commenting with preflight comment.

Installation

pipx install preflight-engine