Maksym Vlasov

If you run `checkov -d "$(pwd)" --hard-fail-on MEDIUM` - you'll get error message and exit code 0

@CaspervdKerk please open the issue in https://github.com/bridgecrewio/checkov/ It also break their checkov pre-commit hook, as far as I can see https://github.com/bridgecrewio/checkov/blob/05cf950fd9f1d1eaba2998d9b845b62494df060c/.pre-commit-hooks.yaml#L6-L15

From https://github.com/bridgecrewio/checkov/issues/5560#issuecomment-1722313286 : > Severities only work with an API key, that's why it doesn't work as expected.

Plus add usage examples to README as it done for other hooks

> > I do want to point out that terraform test doesn’t fail if it’s run in a directory that doesn’t have tests. > > I was talking more of...

> > Tests in 1.6.0 have breaking changes compared to tests that were before. So there is no reason to support `test` before 1.6.0 until someone opens a feature request...

You can do next as a workaround (because `t init` took more time than `t get`) ```yaml - id: terraform_validate args: - --hook-config=--retry-once-with-cleanup=true # - --tf-init-args=-upgrade - id: terraform_tflint args:...

Side note: `terraform_providers_lock` could use `t get` too, rather depend on `terraform_validate`

What should be done: 1. create by analog `common::terraform_get` function https://github.com/antonbabenko/pre-commit-terraform/blob/ae5cbe0342617310b0491146d51573f2f4c93705/hooks/_common.sh#L316 2. Include it in `terraform_tflint` by analogue how `common::terraform_init` used in `terraform_validate` hook 3. (Optional) Add it to `terraform_providers_lock`...

I haven't used `terraform test` yet but would be nice to have that hook. Also, `terraform test` will be GA in 1.6.0, with huge changes > This comes with a...