Cicd
Terraform State Files
Terraform state files can contain resource attributes, provider metadata, and secrets.
Metadata
- id:
infrastructure.terraform.state - category:
infrastructure - sensitivity:
high - subcategory:
terraform - artifact types:
state-file,configuration - tags:
terraform
Path Matchers
| Path | Kind | Platforms |
|---|---|---|
$HOME/.terraform.d/credentials.tfrc.json | file | linux, macos |
**/terraform.tfstate | glob | windows, linux, macos |
**/terraform.tfstate.backup | glob | windows, linux, macos |
Content Indicators
Literal strings:
"resources""outputs"
Impact
credential_accessdiscovery
References
Jenkinsfile Pipeline Configuration
Jenkinsfile pipeline definitions can reveal build stages, deployment logic, credential bindings, and secret references.
Terraform Variable Files
Terraform variable definition files can contain provider inputs, credentials, or secret values used during infrastructure provisioning.