diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index c016cc2..0a7e88d 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -26,5 +26,4 @@ jobs: tfsec_output_file: tfsec.sarif tfsec_output_format: sarif checkov_external_modules: true - checkov_exclude: CKV_TF_1,CKV_AWS_136,CKV_AWS_51,CKV_GIT_4,CKV_AWS_23,CKV_AWS_118,CKV_AWS_293,CKV_AWS_157,CKV_AWS_129,CKV_AWS_354,CKV_AWS_133,CKV_AWS_353,CKV_AWS_16,CKV_AWS_211,CKV2_AWS_64, - tflint_exclude: terraform_standard_module_structure \ No newline at end of file + checkov_exclude: CKV_TF_1,CKV_AWS_136,CKV_AWS_51,CKV_GIT_4,CKV_AWS_23,CKV_AWS_118,CKV_AWS_293,CKV_AWS_157,CKV_AWS_129,CKV_AWS_354,CKV_AWS_133,CKV_AWS_353,CKV_AWS_16,CKV_AWS_211,CKV2_AWS_64 diff --git a/.tflint.hcl b/.tflint.hcl new file mode 100644 index 0000000..7e10bc5 --- /dev/null +++ b/.tflint.hcl @@ -0,0 +1,75 @@ +plugin "terraform" { + enabled = true + version = "0.4.0" + source = "github.com/terraform-linters/tflint-ruleset-terraform" +} + +plugin "aws" { + enabled = true + version = "0.25.0" + source = "github.com/terraform-linters/tflint-ruleset-aws" +} + +rule "terraform_required_version" { + enabled = true +} + +rule "terraform_typed_variables" { + enabled = true +} + +rule "terraform_unused_declarations" { + enabled = true +} + +rule "terraform_comment_syntax" { + enabled = true +} + +rule "terraform_deprecated_index" { + enabled = true +} + +rule "terraform_deprecated_interpolation" { + enabled = true +} + +rule "terraform_documented_outputs" { + enabled = true +} + +rule "terraform_documented_variables" { + enabled = true +} + +rule "terraform_empty_list_equality" { + enabled = true +} + +rule "terraform_module_version" { + enabled = true +} + +rule "terraform_naming_convention" { + enabled = true +} + +rule "terraform_required_providers" { + enabled = true +} + +rule "terraform_standard_module_structure" { + enabled = true +} + +rule "terraform_unused_required_providers" { + enabled = true +} + +rule "terraform_workspace_remote" { + enabled = false +} + +rule "terraform_module_pinned_source" { + enabled = true +} \ No newline at end of file