search

terraform-linters / tflint-plugin-sdk

Experimental: TFLint plugin SDK for building custom rules
Mozilla Public License 2.0
17 stars 14 forks source link

Configure go-plugin's `SecureConfig` #192

Open wata727 opened 2 years ago

wata727 commented 2 years ago

The SecureConfig is a mechanism for verifying checksums at runtime, provided by go-plugin. https://pkg.go.dev/github.com/hashicorp/go-plugin@v1.4.5#SecureConfig

To make use of this, we first need to save the checksum of plugins. It's probably a good idea to first introduce a dependency lockfile. See also https://github.com/terraform-linters/tflint/issues/1486

fgm commented 1 year ago

Just to be clear, is this something that has to be done by TFLint plugin maintainers ? or TF providers ? or config authors ?

AIUI, it's the first one, but just want to be sure.

wata727 commented 1 year ago

This feature will be enabled automatically in future Plugin SDK updates. Plugin developers should use the latest SDK to enable this feature. End users simply update to plugins built with the latest SDK.