Issue #207 - Security with Trivy and GitHub Actions, TFLint, AWS CodeBuild and Self-Hosted GHA Runners, Logic in Terraform, TF-via-PR, Terraform Runtime Progress

Jani Karhunen shows how to integrate security scans for Terraform and OpenTofu projects using Trivy and GitHub Actions. He provides a step-by-step guide to automate detecting vulnerabilities and misconfigurations in your infrastructure code. This approach enhances security practices directly within your CI/CD pipeline.

Sarah Lean demonstrates how to improve Terraform deployments by integrating TFLint with GitHub Actions. She explains setting up automated linting to catch issues early in the CI/CD pipeline, helping teams write cleaner and more reliable Terraform code.

Kieran Lowe shares how to implement self-hosted GitHub Action runners using AWS CodeBuild. He walks through the setup process, highlighting how this approach provides scalable and cost-efficient CI/CD pipelines for teams leveraging GitHub Actions.

Robert Glenn explores the challenges and patterns related to introducing logic into Terraform configurations. He highlights how using conditionals and dynamic blocks can complicate infrastructure as code, offering insights into balancing readability and functionality.

Plan and apply Terraform/OpenTofu via PR automation, using best practices for secure and scalable IaC workflows.

pipeform is a TUI for Terraform runtime progress.