.tf
, .tfvars
,.auto.tfvars
.
Snyk currently does not support variables that were set/defined using environment variables or the
--var
command.--var-file
flag, for example:snyk iac test myproject/staging/networking --var-file=myproject/vars.tf
vars.tf
definitions file from the myproject
directory, dereferences any variables if they exist, and applies them to the context of the scanned path (myproject/staging/networking
).lower
, regex
, regexall
, replace
, substr
, title
, upper
chunklist
, concat
, distinct
, flatten
, length
, merge
, reverse
, sort
csvdecode
, jsondecode
, jsonencode
formatdate
, timeadd
remote_user_addr
to set its cidr_blocks
value.variables.tf
file with a default value but the value is being overridden inside the terraform.tfvars
file.0.0.0.0/0
and this causes the CLI to raise an issue.local.test
equals 0 and we are setting the cidr_blocks
accordingly.local.test
equals to 0 and the value is set to the value of var.remote_user_addr
which causes the CLI to raise an issue.