Files
TFLint runs only on files with the following extension:.tf
Configuration
- Approved plugins only: We accept repository
.tflint.hclonly when it declares no plugins or only plugins from our allowlist. - Any custom plugin not in the allowlist causes CodeRabbit to ignore the users
.tflint.hcl. - A repository
.tflint.hclis not required.
Security policy and restrictions
- Plugin allowlist: Only the following plugins are approved in custom
.tflint.hclfiles.- terraform ā bundled with TFLint (tflint-ruleset-terraform)
- aws ā tflint-ruleset-aws
- google ā tflint-ruleset-google
- azurerm ā tflint-ruleset-azurerm
When we skip TFLint
CodeRabbit skips TFLint when:- TFLint is disabled in your CodeRabbit configuration.
- No
.tffiles are in the pull request. - TFLint is already running in GitHub workflows.