
terraform-azurerm-set-diff-analyzer
Identify false-positive diffs in Terraform AzureRM plans caused
by githubFree
Description
terraform-azurerm-set-diff-analyzer is an agent skill from the github/awesome-copilot collection that separates false-positive diffs from real changes in Terraform plans for the AzureRM provider. Terraform compares Set-type attributes by position rather than by key, so when one element is added or removed, every element can appear to have changed, even though nothing about the resources has changed. This is most visible in Azure resources that rely heavily on Sets, such as Application Gateway, Load Balancer and network security groups. The skill analyzes the plan's JSON output, identifies the diffs that are only reordering within a Set, and distinguishes them from actual resource changes, so a reviewer sees the real changes. It can also filter out the false positives automatically in a CI pipeline. It applies when a plan shows many changes but only one element was added or removed, when Application Gateway, Load Balancer or NSG attributes show that all elements changed, and when the team wants automatic filtering in CI/CD. The skill requires Python 3.8 or later. A filter that hides changes can also hide real ones, so the filtered result should be compared with the full plan before anyone approves an apply. The skill is installed with the skills CLI from the github/awesome-copilot repository. Its skills.sh page showed about 8.9K installs and passing results from three security audits at the time of the scan.…
Highlights
- Separates reordering diffs in Set attributes from real changes
- Analyzes Terraform plan JSON output
- Covers Application Gateway, Load Balancer and NSG
- Automatic filtering in CI/CD
- Installs with the skills CLI
Ratings & Reviews
No ratings yet
Be the first to rate terraform-azurerm-set-diff-analyzer.
People also visit
terraform-azurerm-set-diff-analyzer FAQ
What is a false-positive diff?
A change that appears because Terraform compares Set elements by position, though no resource actually changed.
Which resources does it target?
AzureRM resources with Set-type attributes, such as Application Gateway, Load Balancer and NSG.
What should I check with filtering?
Compare the filtered result with the full plan, since a filter can hide real changes too.
How do I install it?
Run npx skills add https://github.com/github/awesome-copilot --skill terraform-azurerm-set-diff-analyzer.
What security audits does it have?
skills.sh lists three audits: Gen Agent Trust Hub Pass, Socket Pass and Snyk Pass.
What are the best terraform-azurerm-set-diff-analyzer alternatives?
Popular alternatives to terraform-azurerm-set-diff-analyzer include import-infrastructure-as-code, terraform-engineer and azure-prepare. See all terraform-azurerm-set-diff-analyzer alternatives



