Skip to content

Terraform security agent pr#1142

Open
ranglanimanish90 wants to merge 3 commits intogithub:stagedfrom
ranglanimanish90:terraform-security-agent-pr
Open

Terraform security agent pr#1142
ranglanimanish90 wants to merge 3 commits intogithub:stagedfrom
ranglanimanish90:terraform-security-agent-pr

Conversation

@ranglanimanish90
Copy link

This PR adds a comprehensive Terraform Security & Best Practices Workflow that performs automated security scanning and cost optimization analysis for cloud infrastructure defined in Terraform code. The workflow supports multi-cloud environments with detailed coverage for both AWS and Azure.

Organizations using Terraform to manage cloud infrastructure need automated ways to:

Detect security vulnerabilities before deployment
Identify compliance issues early in the development cycle
Optimize cloud spending through infrastructure right-sizing
Maintain security and cost best practices across teams
This workflow addresses these needs by providing continuous, automated analysis that creates actionable GitHub Issues with specific recommendations.

I have tried and tested this workflow, last month and here is the example for that.
ranglanimanish90/newinfra#52

Link to my personal blog where i explained about this feature - https://kloudscoop.com/github-agentic-workflows-working-implementation-part1/

Feel free to give your feedback on improvements as applicable.

github-actions bot and others added 3 commits March 23, 2026 05:05
This GitHub agentic workflow daily scan through terraform repo and generate issue report about critical vulnerabilities, security advise and cost optimization recommendation.
I have tried this in my personal GitHub repo and here is the link for reference
ranglanimanish90/newinfra#52
@aaronpowell
Copy link
Contributor

It looks like you've incorrectly branched from the main branch not staged, and as a result all the materialised plugins are included in this PR.

You can attempt to fix this with a rebase:

git fetch origin staged
git rebase --onto origin/staged origin/main <branch name>
git push --force-with-lease

If that does not resolve it, you can run npm run plugin:clean which will delete the materialised plugins and you can commit that change.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants