CLI for the digger open source IaC orchestration tool
CI/CD for Terraform is tricky. To make life easier, specialised CI systems aka
TACOS exist - Terraform Cloud, Spacelift, Atlantis, etc.
But why have 2 CI systems? Why not reuse the async jobs infrastructure with
compute, orchestration, logs, etc of your existing CI?
Digger runs terraform natively in your CI. This is:
* Secure, because cloud access secrets aren't shared with a third-party
* Cost-effective, because you are not paying for additional compute just to run
your terraform
Features
* Terraform plan and apply in pull request comments
* Private runners - thanks to the fact that there are no separate runners! Your
existing CI's compute environment is used
* Open Policy Agent (OPA) support for RBAC
* PR-level locks (on top of Terraform native state locks, similar to Atlantis)
to avoid race conditions across multiple PRs
* Terragrunt, Workspaces, multiple Terraform versions, static analysis via
Checkov, plan persistence, ...
* Drift detection
This package contains the digger CLI.
Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.