-
Question[Originally asked in the https://opentf.org/announcement We want to understand how From a technical perspective, I expect that it will be a no-op for the time being as OpenTofu anticipates maintaining compat/interop for the foreseeable future. (However, OpenTofu has stated that some functionality may be added to OpenTofu that is a superset of what's in base Terraform.[source]) From a process perspective:
|
Beta Was this translation helpful? Give feedback.
Replies: 5 comments 5 replies
-
|
Hi there, thank you for raising this; it certainly is an important discussion to have. While I am not in a position to provide direct replies to your questions, I would assume that OpenTF is going to become supported as a Trivy Plugin. |
Beta Was this translation helpful? Give feedback.
-
|
I've been using
This is the keyword I'm interested in. “Support” does not mean that it works. Support refers to what happens when something goes wrong; who “owns” solving the problem. This is what I'm seeking clarity about. :) |
Beta Was this translation helpful? Give feedback.
-
|
Thanks for asking, it's hard to say what OpenTF will actually look like at this point of time as it's just a manifesto. As per the manifesto, it seems to have 1:1 compatibility with Terraform so my guess is that it should work out of the box. But then again I'm speculating as we don't have the source code to try it out just yet. |
Beta Was this translation helpful? Give feedback.
-
|
Issue to track the first release of OpenTF: https://github.com/opentffoundation/roadmap/issues/10. |
Beta Was this translation helpful? Give feedback.
-
|
OpenTF is available https://github.com/opentffoundation/opentf |
Beta Was this translation helpful? Give feedback.
-
|
Has there been any consideration on this at all recently? This is very important. OpenTofu is now GA: https://opentofu.org/blog/opentofu-is-going-ga/ At the moment, there is no doubt that tfsec will probably work on both without much issue. But as time goes on, the feature gap between Terraform and OpenTofu will only get wider, and will eventually be incompatible with one another. What is the plan going forward? Will tfsec continue supporting Terraform? Will there be a OpenTofu support? Or will it support both? |
Beta Was this translation helpful? Give feedback.
-
|
We don't have any plans at the moment. Is there anything in particular in OpenTofu that Trivy is unable to scan? If so, please share a reproducible code example so we can evaluate. |
Beta Was this translation helpful? Give feedback.
-
|
Hi simar7, Just for asking for plan going forward, for the reason I mentioned above. For example, Gruntwork which develops tools like Terragrunt will only support OpenTofu going forward: https://blog.gruntwork.io/the-future-of-terraform-must-be-open-ab0b9ba65bca?gi=a713d8f1047f. Companies and organizations have to make decisions on which path they're going to take. Some may be able to support both, but I doubt most have the resource to do so once the gap between Terraform and OpenTofu widen. The 1:1 compatibility between Terraform and OpenTofu is really for this early stage of the fork. Going forward (since the license change to BSL), Terraform isn't going to be the upstream source for OpenTofu. |
Beta Was this translation helpful? Give feedback.
-
|
as you probably realized, tfsec has been merged into Trivy, so let's focus the discussion on Trivy. |
Beta Was this translation helpful? Give feedback.
-
|
**Just marking this as answer since the thread will likely continue here, and I want new people following the discussion to see the highlighted comment |
Beta Was this translation helpful? Give feedback.
as you probably realized, tfsec has been merged into Trivy, so let's focus the discussion on Trivy.
Trivy supports several IaC languages, including Terraform. While ideally we would like it to support everything, we are limited in capacity and are prioritizing based on user feedback. If we see that enough Trivy users will use OpenTofu, and we see that Trivy has a limitation with OpenTofu, we would be able to evaluate the effort and prioritize accordingly. In the meantime, we welcome the OpenTofu community to make any suggestions or to engage in this task.