Kazuma Watanabe

Fixes https://github.com/terraform-linters/tflint/issues/1768 Merging this PR will cause all built-in key verifications to fail, so further investigation is required to mitigate user impact.

`tflint --init` does not check signing key expiration date

1

### Summary When installing plugins with `tflint --init`, plugins under terraform-linters or plugins with explicitly set `signing_key` will have their signatures verified by PGP. https://github.com/terraform-linters/tflint/blob/c1aef408b425530cc0509b66c8f253283a163e96/plugin/signature.go#L55 However, the `golang.org/x/crypto/openpgp.CheckDetachedSignature` does not...

## Introduction TFLint is a Terraform static analysis framework and exposes an API for plugins to provide its functionality widely. The [SDK](https://github.com/terraform-linters/tflint-plugin-sdk) is already 3 years old since the release...

## Introduction Currently, TFLint will stop immediately and return an error if an error occurs on the way: ```console $ tflint Failed to check ruleset; Failed to check `azurerm_lb_probe_invalid_protocol` rule:...

## Introduction Since v0.15.4, Terraform introduced the concept of "escaping blocks". https://github.com/hashicorp/terraform/pull/28709 Attributes defined inside escaping blocks are merged and treated like normal attributes, except meta-arguments. For example: ```hcl resource...

Introduce dependency lockfile

1

## Introduction TFLint has a mechanism to install plugins, so you can easily extend rules by third-party plugins. Configure the plugins as follows and install them with `tflint --init`: ```hcl...

Introduce a concept of subcommands in CLI

2

## Introduction Currently, TFLint has 4 modes of operation. - `tflint --init` - Installing plugins - `tflint` - Inspecting a Terraform configuration - `tflint --langserver` - Starting a language server...

Add new `Rails/PrivateTransactionOption` cop

16

This PR adds a new cop called `Rails/PrivateTransactionOption`. This cop checks whether `ActiveRecord::Base.transaction(joinable: _)` is used. The `joinable` option is a private API and is not intended to be called...

AWS has announced the end of support for aws-sdk-go v1, and we will need to migrate to v2. https://aws.amazon.com/jp/blogs/developer/announcing-end-of-support-for-aws-sdk-for-go-v1-on-july-31-2025/ It would be relatively easy to simply update the Go module,...

Add support for GitHub Actions OIDC new claims

2

**Description** See also https://github.blog/changelog/2023-01-10-github-actions-openid-connect-token-now-supports-more-claims-for-configuring-granular-cloud-access/ Recently, GitHub announced that OpenID Connect token supports more claims. - `actor_id` - `repository_id` - `repository_owner_id` - `workflow_ref` - `workflow_sha` - `job_workflow_sha` https://token.actions.githubusercontent.com/.well-known/openid-configuration It may be...