yor VS terratag

.git-script: &git-script | set -xv cd $CI_PROJECT_DIR git status lines=$(git status -s | wc -l) if [ $lines -gt 0 ];then echo "committing" git config --global user.name "$AUTO_COMMITTER_NAME" git config --global user.email "$AUTO_COMMITTER_EMAIL" echo ".yor_plugins" >> .gitignore git add . git commit -m "YOR: Auto add/update yor.io tags." git push -o ci.skip "https://${GITLAB_USER_NAME}:${GIT_PUSH_TOKEN}@${CI_REPOSITORY_URL#*@}" else echo "no updated resources, nothing to commit." fi default: image: name: hashicorp/terraform:light entrypoint: - /usr/bin/env - "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" stages: - validate - yor validate: stage: validate before_script: - rm -rf .terraform - terraform --version - terraform init - export AWS_DEFAULT_REGION=eu-west-1 script: - terraform validate -json run-yor: stage: yor image: ruby:2.5 script: - git checkout ${CI_COMMIT_SHA} - export YOR_VERSION=0.1.62 - wget -q -O - https://github.com/bridgecrewio/yor/releases/download/${YOR_VERSION}/yor-${YOR_VERSION}-linux-amd64.tar.gz | tar -xvz -C /tmp - /tmp/yor tag -d . - *git-script

‍Terratag is a tool designed to assign tags or labels to a complete collection of Terraform or Terragrunt files. It enables applying tags or labels to resources within AWS, GCP, and Azure.

Terratag (tagging): https://github.com/env0/terratag (disclaimer, I am CEO at env0)

Documentation:

Cost:Infracost (estimation): https://github.com/infracost/infracostTerratag (tagging): https://github.com/env0/terratag (disclaimer, I am CEO at env0)

🏷 Terratag is a CLI tool allowing for tags or labels to be applied across an entire set of Terraform files.