Feature Request: Terraform Source Code Scanning within Approval Policies
We need the ability to scan and validate Terraform source code within Spacelift approval policies to enforce security guardrails. Specifically, we want to prevent (not just detect) the usage of potentially dangerous Terraform providers before plans are executed.
Currently, approval policies do not have visibility into the underlying Terraform source code, limiting our ability to enforce provider-level security controls.
- Workaround
- Problem
Log in to comment and vote
Comments1
Aleksandra Cieslak
Nov 2
Hi,
I'm a PM at Spacelift. I'm looking into your request and would love to learn more about your workflow.
Would you have 30 minutes for a call? Feel free to pick a time here: [calendar link]