Cicd

Terraform Variable Files

Terraform variable definition files can contain provider inputs, credentials, or secret values used during infrastructure provisioning.

Metadata

  • id: infrastructure.terraform-variable-files
  • category: infrastructure
  • sensitivity: high
  • subcategory: terraform
  • artifact types: configuration, credential
  • tags: terraform

Path Matchers

PathKindPlatforms
**/terraform.tfvarsglobwindows, linux, macos
**/terraform.tfvars.jsonglobwindows, linux, macos
**/*.auto.tfvarsglobwindows, linux, macos
**/*.auto.tfvars.jsonglobwindows, linux, macos

Content Indicators

Literal strings:

  • password
  • secret
  • token

Credential Types

  • password
  • access-token

Impact

  • credential_access
  • discovery

References

On this page