Add support to parse Terraform plan and state files #40
Conversation
There was a problem hiding this comment.
@Subhajit97 please take a look at the review comments. Thanks!!
There was a problem hiding this comment.
@Subhajit97 please take a look at the review comment. Thanks!!
| // Check if the file contains TF plan | ||
| if pathInfo.IsTFPlanFilePath { | ||
| // Initialize the JSON parser | ||
| jsonParser := p.Parser{} |
There was a problem hiding this comment.
Do we need another parser, or can we add the JSON parser into the combined parser we're using, e.g., https://github.com/Checkmarx/kics/blob/954212dcacad42ff210284d29b39898c56b92814/pkg/scan/scan.go#L224-L236?
bigdatasourav
changed the title
There was a problem hiding this comment.
@bigdatasourav please take a look at the minor review comments. Thanks!!
config/terraform.spc
Outdated
| # Similarly, Plan File Paths is a list of locations to search for Terraform plan files | ||
| # Similarly, State File Paths is a list of locations to search for Terraform state files |
There was a problem hiding this comment.
| # Similarly, Plan File Paths is a list of locations to search for Terraform plan files | |
| # Similarly, State File Paths is a list of locations to search for Terraform state files | |
| # Plan File Paths is a list of locations to search for Terraform plan files | |
| # State File Paths is a list of locations to search for Terraform state files |
docs/index.md
Outdated
| @@ -16,6 +16,44 @@ A Terraform configuration file is used to declare resources, variables, modules, | |||
|
|
|||
| [Steampipe](https://steampipe.io) is an open source CLI to instantly query data using SQL. | |||
|
|
|||
| The plugin supports scanning Terraform configuration files from various sources (e.g., [Local files](#configuring-local-file-paths), [Git](#configuring-remote-git-repository-urls), [S3](#configuring-s3-urls) etc.), and [parsing Terraform plans](#scanning-terraform-plan) as well. | |||
There was a problem hiding this comment.
@bigdatasourav could you please update this line to mention the terraform state file as well?
| connection "terraform" { | ||
| plugin = "terraform" | ||
|
|
||
| configuration_file_paths = ["*.tf"] |
There was a problem hiding this comment.
@bigdatasourav can we add the new config arguments as well?
Integration test logs
Logs
Example query results
Results