sethbacon/Setup Terraform (hardened)
Install Terraform or OpenTofu with checksum, GPG, and cosign verification; no CLI wrapper, so raw exit codes are preserved.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| binary | Which CLI to install — "terraform" or "tofu" (OpenTofu). | no | terraform |
| version | Version to install (e.g. "1.9.5"), or "latest". | no | latest |
| require-checksum | Verify the downloaded archive against the published SHA256SUMS. | no | true |
| require-gpg-signature | Terraform only — verify SHA256SUMS against HashiCorp's GPG signature. The HashiCorp public key is fetched from its well-known URL and its fingerprint is asserted before use. | no | false |
| require-cosign-verification | OpenTofu only — verify SHA256SUMS with cosign against the OpenTofu release identity. Requires the cosign CLI on PATH (e.g. sigstore/cosign-installer). | no | false |
Outputs
| name | description |
|---|---|
| version | The resolved version that was installed. |
| path | Directory the binary was installed into (also added to PATH). |