In this post, we’re going to discuss why we picked Terraform as our IAC tool of choice. In the intro to the series, we discussed why every company should be using infrastructure-as-code (IAC). This is Part 1 of the Comprehensive Guide to Terraform series. Update, Sep 28, 2022: We’ve updated this blog post series for Terraform 1.2 and released the 3rd edition of Terraform: Up & Running ! Update, J: We’ve updated this blog post series for Terraform 0.12 and released the 2nd edition of Terraform: Up & Running ! It helps me make good decisions about my project.Update, Novem: We took this blog post series, expanded it, and turned it into a book called Terraform: Up & Running ! When a vulnerability is found, the plugin provides a link to the Snyk website, which provides insights on the vulnerability severity and other important information. Now I can analyze if I need to fix the problem with a newer version if that is available or I might choose to exclude the dependency altogether.

Most of the time the vulnerability originates from an indirect dependency, and it would be difficult to find. I personally like the fact that the integrated view shows me where the vulnerability comes from and how many layers deep it is. When a vulnerability is found, the plugin provides you with information about the vulnerability and even offers possible fixes when available.

The Snyk plugin for Eclipse scans your dependencies, builds up a dependency tree and checks for any known vulnerabilities. The Snyk plugin offers broad language support within Eclipse, including Java, Scala, JavaScript.

Terraform plugins extensions