tflint-plugin-sdk
tflint-plugin-sdk copied to clipboard
Configure go-plugin's `SecureConfig`
The SecureConfig is a mechanism for verifying checksums at runtime, provided by go-plugin.
https://pkg.go.dev/github.com/hashicorp/[email protected]#SecureConfig
To make use of this, we first need to save the checksum of plugins. It's probably a good idea to first introduce a dependency lockfile. See also https://github.com/terraform-linters/tflint/issues/1486
Just to be clear, is this something that has to be done by TFLint plugin maintainers ? or TF providers ? or config authors ?
AIUI, it's the first one, but just want to be sure.
This feature will be enabled automatically in future Plugin SDK updates. Plugin developers should use the latest SDK to enable this feature. End users simply update to plugins built with the latest SDK.