SIGN IN SIGN UP
hashicorp / terraform UNCLAIMED

Terraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.

0 0 32 Go

PSS: Add interactive confirmation of state storage provider trust when initialising a state store for the first time (#38395)

* refactor: Replace use of prepareInstallerEvents method. This will allow finer control of callbacks when implementing security related features

* feat: Users are prompted to approve a provider used for PSS on first use, and only if downloaded via HTTP.

Prompts include signer details and key ID data.

* test: Users see "Authentication: unauthenticated" in prompt if network mirror doesn't include hashes

They'll see authentication data in all other prompt scenarios. There's no auth when using an fs mirror, but when those are in use we trust the providers already and no prompts are raised.

* refactor: Simplify how we prepare installation event callbacks by defining reused callbacks

* refactor: Remove unused parameters from `getProvidersFromState`
S
Sarah French committed
7a960db55364a5c86724ef67b80a91033035169a
Parent: a941456
Committed by GitHub <noreply@github.com> on 5/12/2026, 2:42:26 PM