TFLint

CodeRabbit’s guide to TFLint.

TFLint is a linter for Terraform configuration files.

CodeRabbit runs TFLint v0.64.0.

Files

TFLint runs only on files with the following extension:

• .tf

Configuration

enabled · boolean · default: true

Enable TFLint: TFLint is a Terraform linter for finding potential errors.

.coderabbit.yaml

.coderabbit.yaml

reviews:
  tools:
    tflint:
      enabled: true

Web UI

In your organization or repository settings, go to Reviews → Tools and turn the tool on or off with its toggle.

CodeRabbit handles a repository .tflint.hcl as follows:

• If the repository does not include .tflint.hcl, CodeRabbit runs TFLint with its safe defaults.
• If the repository does include .tflint.hcl, CodeRabbit writes and uses a safe override config that enables only the bundled terraform ruleset.
• A repository .tflint.hcl is not required.

Security policy and restrictions

• CodeRabbit recognizes the following plugin names as approved when inspecting .tflint.hcl.
  • terraform — bundled with TFLint (tflint-ruleset-terraform)
  • aws — tflint-ruleset-aws
  • google — tflint-ruleset-google
  • azurerm — tflint-ruleset-azurerm

When we skip TFLint

CodeRabbit skips TFLint when:

• TFLint is disabled in your CodeRabbit configuration.
• No .tf files are in the pull request.
• TFLint is already running in GitHub workflows.

Links

• TFLint GitHub Repository
• TFLint Documentation