是否存在可分析Terraform代码的JQAssistant插件？

Great question! Let's break down what's currently available for analyzing Terraform code with JQAssistant:

• Official/Community Plugin Status: As of now, there's no official Terraform plugin released by JQAssistant, and well-maintained community plugins for this use case are pretty scarce. Many users have requested this functionality, but it hasn't been widely developed or adopted yet.

• Practical Workarounds:

  • Use Terraform's JSON Output: You can build a custom analysis pipeline using JQAssistant's core features combined with Terraform's ability to export state/plan data as JSON. Here's a simple workflow:
    1. Generate JSON output with commands like terraform show -json (for existing infrastructure state) or terraform plan -out=tfplan && terraform show -json tfplan (for execution plans).
    2. Import this JSON file into JQAssistant, then write custom Cypher queries to run checks—like verifying resource naming standards, detecting overly permissive security groups, or identifying unused variables.
  • Combine with Terraform-Specific Tools: First run dedicated Terraform analyzers like tflint or checkov for baseline compliance checks, then import their results into JQAssistant to centralize visualization and reporting alongside other codebase analyses.

• Build a Custom Plugin (If You Have Dev Capacity): If your team has the bandwidth, you can extend JQAssistant by building your own plugin. JQAssistant offers an extension API, and you can integrate HCL (Terraform's configuration language) parsing libraries to directly parse .tf files. This lets you map Terraform resources, modules, variables, and their relationships into Neo4j graph nodes, enabling deep, native analysis of your Terraform codebase.

内容的提问来源于stack exchange，提问作者Matthias