terraform-stacks

Warn

Audited by Runlayer on Feb 26, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
89%
Files
7
Flagged
5
Chunks
17
Flagged Files (5)
terraform-stacks/references/troubleshooting.mdMEDIUM
89.5%

Tool passed security scan

Malicious tool definition detected

**Regenerate provider lock file:** ```bash terraform stacks providers-lock ``` 2. **Add additional platforms** (if deploying from different OS): ```bash terraform stacks providers-lock \ -platform=linux_amd64 \ -platform=darwin_amd64 \ -platform=darwin_arm64 ``` 3. **Verify required_providers block:** ```hcl required_providers { aws = { source = "hashicorp/aws" version = "~> 5.7.0" # Ensure version constraint is valid } } ``` 4.

Contact HashiCorp Support with details

terraform-stacks/SKILL.mdMEDIUM
87.0%

Tool passed security scan

Malicious tool definition detected

See `references/deployment-blocks.md` for all context variables and patterns. ### Publish Output and Upstream Input Blocks Link Stacks together by publishing outputs from one Stack and consuming them in another: ```hcl # In network Stack - publish outputs publish_output "vpc_id_network" { type = string value = deployment.network.vpc_id } # In application Stack - consume outputs upstream_input "network_stack" { type = "stack" source = "app.terraform.io/my-org/my-project/networking-stack" } deploy

terraform-stacks/references/api-monitoring.mdMEDIUM
85.6%

Malicious tool definition detected

terraform-stacks/references/deployment-blocks.mdMEDIUM
78.1%

Malicious tool definition detected

## Identity Token Block Generates JWT tokens for OIDC authentication with cloud providers. ### Syntax ```hcl identity_token "<token_name>" { audience = [<audience_strings>] } ``` ### Arguments - **token_name** (label, required): Unique identifier for this token - **audience** (required): List of audience strings for the JWT ### Accessing Token Reference the JWT using: `identity_token.<n>.jwt` ### Cloud Provider Audiences **AWS:** ```hcl identity_token "aws" { audience = ["aws.workload.identity"]

terraform-stacks/references/examples.mdMEDIUM
75.0%

Tool passed security scan

Malicious tool definition detected

### Step 3: Remove the Deployment Block After the deployment is successfully destroyed, remove the entire deployment block from your configuration: ```hcl identity_token "aws" { audience = ["aws.workload.identity"] } locals { role_arn = "arn:aws:iam::123456789012:role/terraform-stacks" } # deployment "development" block has been removed deployment "staging" { inputs = { aws_region = "us-west-1" environment = "staging" instance_count = 2 role_arn = local.role_arn identity_token = identity_token.a

Passed Files (2)Click to expand
terraform-stacks/references/linked-stacks.mdOK
27.5%

Tool passed security scan

terraform-stacks/references/component-blocks.mdOK
20.4%

Tool passed security scan

Audit Metadata
Max File Score
89%
Classification
KNOWN_SERVER_ALL_UNKNOWN
Files Scanned
7
Files Flagged
5
Chunks Analyzed
17
Analyzed
Feb 26, 2026, 06:03 AM
Security Audit — runlayer — terraform-stacks