zitadel-terraform

Warn

Audited by Gen Agent Trust Hub on Oct 17, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONCREDENTIALS_UNSAFE
Full Analysis
  • [COMMAND_EXECUTION]: The documentation includes a bash script in the 'Gateway gRPC 403 Workaround' section designed to be executed in a terminal. This script performs port forwarding via kubectl and executes infrastructure changes using tofu apply.
  • [PRIVILEGE_ESCALATION]: The workaround script utilizes sudo tee -a /etc/hosts to append entries to the system hosts file. Executing commands with sudo grants elevated privileges and modifies core system configurations.
  • [CREDENTIALS_UNSAFE]: The 'Importing' section contains an example command (terraform import zitadel_human_user.imported ...:Password1!') that includes a literal password string. Passing sensitive credentials as command-line arguments is insecure as they may be exposed in process lists or shell history.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 17, 2026, 07:24 PM