PRP: Extractor for Terraform
Open
@lanced00m is already working on this.
Since Sep 29, 2025.
PRP
PRP:Accepted
- Dominant language
- Go
- Stars
- 644
- Forks
- 201
- Avg merge
- 2d 17h
- Merged PRs (30d)
- 29
Description
- Software distribution method or binary type: *.hcl and *.tf
- Any critical, emergent vulnerability associated with software from the distribution method:
None, - Resources: https://developer.hashicorp.com/terraform/language/files/dependency-lock#lock-file-location
I think we can use github.com/hashicorp/hcl/v2/hclparse to parse these files.
*.tf files have many use cases. I'm adding this new reference here so I don't forget to check these:
Hashicorp Terraform:
https://developer.hashicorp.com/terraform/language/files/dependency-lock#lock-file-location
Hashicorp Nomad:
https://developer.hashicorp.com/nomad/tutorials/get-started/gs-deploy-job#review-the-example-application
OpenTofu:
https://opentofu.org/docs/language/#example
terragrunt:
https://terragrunt.gruntwork.io/docs/getting-started/quick-start/
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.