terraform-guardrail

The application is designed with a strong security focus, primarily to identify security risks like hardcoded secrets and sensitive data in Terraform configurations and state files. No 'eval' or similar dangerous patterns were found. Network requests are made to the official Terraform Registry for provider metadata, with a timeout, which is a standard and expected interaction. File I/O for uploaded files in the web UI uses temporary directories. The use of `subprocess.run` to invoke the `terraform` CLI for schema validation is a legitimate function of the tool, assuming the installed `terraform` CLI itself is trusted. The project actively aims to improve the security posture of Terraform workflows rather than introducing new vulnerabilities.