Code for checking Terraform configuration: runs the formatter, validator, linting and security checks

check_tf.sh

# Install:
#   brew install tflint
#   brew install tfsec
#   brew install terraform
#   nano /path/to/check_tf.sh
#   chmod +x /path/to/check_tf.sh
#
# Usage:
#   cd /path/to/terraform/tf_files
#   tflint --init
#   TFLINT_CONFIG=$(realpath ./.tflint.hcl) ./check_tf.sh
#   TFLINT_CONFIG=/path/to/.tflint.hcl /path/to/check_tf.sh

if [ "$TFLINT_CONFIG" = '' ]; then
    echo 'the TFLINT_CONFIG environment variable must be set'
    exit 1
fi
echo "Checking Terraform configuration..."
echo "Formatting..."
terraform fmt
echo "Linting..."
tflint --config="$TFLINT_CONFIG" --recursive
echo "Checking security..."
tfsec
echo "Validating..."
terraform validate