Skip to main content

Feature Request: Terraform Source Code Scanning within Approval Policies

We need the ability to scan and validate Terraform source code within Spacelift approval policies to enforce security guardrails. Specifically, we want to prevent (not just detect) the usage of potentially dangerous Terraform providers before plans are executed.

Currently, approval policies do not have visibility into the underlying Terraform source code, limiting our ability to enforce provider-level security controls.

Workaround
Problem
Status: 🔭 Discovery1 comment

Log in to comment and vote

Comments1

  • Aleksandra Cieslak

    Team•

    Nov 2

    Hi,

    I'm a PM at Spacelift. I'm looking into your request and would love to learn more about your workflow.

    Would you have 30 minutes for a call? Feel free to pick a time here: [calendar link]