Self-hosted alternatives to terraform-azurerm-set-diff-analyzer

T

terraform-azurerm-set-diff-analyzer

Identify false-positive diffs in Terraform AzureRM plans caused

terraform-azurerm-set-diff-analyzer is an agent skill from the github/awesome-copilot collection that separates false-positive diffs from real changes in Terraform plans for the AzureRM provider. Terraform compares Set-type attributes by position rather than by key, so when one element is added or removed, every element can appear to have changed, even though nothing about the resources has changed. This is most visible in Azure resources that rely heavily on Sets, such as Application Gateway, Load Balancer and network security groups. The skill analyzes the plan's JSON output, identifies the diffs that are only reordering within a Set, and distinguishes them from actual resource changes, so a reviewer sees the real changes. It can also filter out the false positives automatically in a CI pipeline. It applies when a plan shows many changes but only one element was added or removed, when Application Gateway, Load Balancer or NSG attributes show that all elements changed, and when the team wants automatic filtering in CI/CD. The skill requires Python 3.8 or later. A filter that hides changes can also hide real ones, so the filtered result should be compared with the full plan before anyone approves an apply. The skill is installed with the skills CLI from the github/awesome-copilot repository. Its skills.sh page showed about 8.9K installs and passing results from three security audits at the time of the scan.