sethbacon/Terraform drift report
Parse a Terraform/OpenTofu plan JSON into drift counts and a changed-resource summary; optionally POST to a TSM callback.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| plan-json-file | Path to the plan JSON (output of `terraform show -json` / `tofu show -json`). | yes | — |
| module-manifest | Path to the resolved module lockfile for locked versions. | no | .terraform/modules/modules.json |
| include-module-provenance | Include module_calls (+ module_locks) in the report/callback. | no | true |
| fail-on-drift | Fail the step when drift is detected. | no | false |
| detail | Free-text run label forwarded as the callback `detail` field. | no | "" |
| callback-url | TSM drift callback URL. POST happens only if url and token are both set. | no | "" |
| callback-token | Per-run one-shot TSM callback token (sent as X-TSM-Callback-Token). | no | "" |
| reject-unauthorized | Verify TLS on the callback (set false only for a private-CA endpoint). | no | true |
Outputs
| name | description |
|---|---|
| drifted | "true" when any non-no-op, non-read change was planned. |
| added | Count of resources whose plan contains a create. |
| changed | Count of resources whose plan contains an update. |
| destroyed | Count of resources whose plan contains a delete. |
| summary-file | Path to the written JSON report (the exact callback body). |