zitadel-terraform
Warn
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The documentation includes a bash script in the 'Gateway gRPC 403 Workaround' section designed to be executed in a terminal. This script performs port forwarding via
kubectland executes infrastructure changes usingtofu apply. - [PRIVILEGE_ESCALATION]: The workaround script utilizes
sudo tee -a /etc/hoststo append entries to the system hosts file. Executing commands withsudogrants elevated privileges and modifies core system configurations. - [CREDENTIALS_UNSAFE]: The 'Importing' section contains an example command (
terraform import zitadel_human_user.imported ...:Password1!') that includes a literal password string. Passing sensitive credentials as command-line arguments is insecure as they may be exposed in process lists or shell history.
Audit Metadata