jameswoolfenden / ghat

Ghat is a tool for updating your GitHub actions and Terraform with the latest version of it dependencies and using immutable hashes instead of mutable tags.

Hi there 👋

I'm James (he/him). My $dayjob is as a Solution Architect at Palo Alto Networks. I'm online... Twitter

• 🔭 I’m currently working on test tools for DevSecOps
• 🌱 I’m currently learning everything
• 👯 I’m looking to collaborate on tools and modules
• 🤔 I’m looking for help with everything
• 💬 Ask me about Pike, Sato, Ghat, Stevedore Terraform, Packer, making modules, Yor and Checkov.
• 📫 How to reach me: [email protected], im also on Slack here: https://codifiedsecurity.slack.com

ghat's Issues

add support for pre-commit update to hashes

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is.
Ex. I'm always frustrated when [...]

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

Respect comments and whitespace outside terraform blocks

Is your feature request related to a problem? Please describe.
When using swipe to replace references in a terraform file, any whitespace and comments outside modules terraform blocks are removed.

Describe the solution you'd like
Respect existing whitespace and comments

Describe alternatives you've considered
Manually revert/unstage unwanted formatting changes (this is fine, just time consuming on larger projects).

Additional context
For example, this file input:

# This is a comment
resource "type" "name" {
  key = "value"
  
  # Comment in block
  another_key = "another_value"
}

resource "another_type" "another_name" {
  key = "value"
}

becomes this output:

resource "type" "name" {
  key = "value"

  # Comment in block
  another_key = "another_value"
}
resource "another_type" "another_name" {
  key = "value"
}

as you can see the whitespace and comments within the block is respected but anything outside is removed.

update and manage terraform.tf

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is.
Ex. I'm always frustrated when [...]

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

add support for kubernetes manifest

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is.
Ex. I'm always frustrated when [...]

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.