{"repo":"infiniumtek/terraform-review-agent","free":true,"listed":false,"github":"https://github.com/infiniumtek/terraform-review-agent","clone":"git clone https://github.com/infiniumtek/terraform-review-agent.git","description":"Reusable GitHub Action that reviews Terraform PRs for security, cost, and style using a LangGraph multi-agent system, posting a single severity-ranked comment.","language":"Python","stars":100,"topics":["ai-agents","ai-tools","workflow-automation","cicd"],"license":"MIT","category":"deployment-docker-iac","readme_excerpt":"terraform-review-agent LLM providers: A reusable GitHub Actions workflow that reviews Terraform pull requests with a LangGraph multi-agent system and posts a single, severity-ranked sticky comment. Three specialists run in parallel over the PR's changed Terraform files: Agent Scanners Looks for :-- :-- :-- 🔒 Security tfsec + checkov misconfigurations, insecure defaults, exposed resources 💰 Cost infracost diff monthly cost deltas vs. the base branch 🎨 Style tflint + terraform fmt -check lint findings and formatting drift Scanners own detection and severity ; an LLM only rewords each finding into a concise, actionable sentence — so the set of findings is deterministic run to run. Results are merged, de-duplicated, severity-ranked, and upserted as one comment (edited in place on every push) rather than stacking up. Everything runs inside a prebuilt container ( ghcr.io/infiniumtek/terraform-review-agent ) that bundles pinned terraform , tfsec , tflint , infracost , and checkov binaries, so there are no per-run tool installs . --- Quick start Add a workflow to your repo that calls the reusable workflow. A complete, commented sample lives in examples/example-caller.yml ; the minimal version: Pin @v1 (the major float) or a specific release tag such as @v1.2.3 . The paths filter on the trigger decides whether the job spins up at all; the agent additionally early-exits if no Terraform files actually changed. Manual re-runs: workflow dispatch events carry no PR context, so pass a pr","default_branch":null,"files":null,"tree":[],"storefront":"/r/infiniumtek","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/infiniumtek/terraform-review-agent/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}