antonbabenko/pre-commit-terraform

Pre-commit-terraform is a collection of Git hooks designed to automatically check and format Terraform configuration files before you commit code. Terraform is a tool used to define and manage cloud infrastructure by writing configuration files. A Git hook is a script that runs automatically at a certain point in the version control process, for example right before you save a new commit. The pre-commit framework is a system that manages and runs these hooks across multiple languages and tools. When you set this up in a project, it runs a series of checks every time a developer commits. The checks cover formatting so that all Terraform files follow a consistent style, validation to catch syntax errors and configuration mistakes, security scanning to flag potential vulnerabilities in the infrastructure definitions, and documentation generation to keep module documentation up to date automatically. If any check fails, the commit is blocked until the issue is fixed. The hooks support Terraform, OpenTofu (an open-source fork of Terraform), and Terragrunt. You can run them locally on your own machine before pushing code, or in a continuous integration pipeline so every pull request is checked automatically. A Docker image is provided that bundles all the supported tools together, which avoids the need to install each tool individually on every developer's machine. Specific hooks include terraform-fmt for formatting, terraform-validate for syntax checking, terraform-docs for updating documentation from code, tflint for deeper linting rules, trivy and checkov for security scanning, infracost for estimating cloud spending changes, and tfupdate for keeping provider version references current. Many hooks can run in parallel to keep the overall check time short. Installation involves adding a configuration file to your repository that lists which hooks you want, then running one setup command. The full README is longer than what was shown.