Terraform

SonarQube 10.4 can analyze Infrastructure-as-Code (IaC) languages such as CloudFormation, Kubernetes, and Terraform.

For AI agents: You're in the SonarQube Server 10.4 documentation. For a list of all 10.4 pages, see the SonarQube Server 10.4 page index. For the whole site, see the page index or the full text. For another version, replace 10.4 in the URL with that version. The latest version has no version number in its URL.

Discover and update the Terraform Analysis parameters in Administration > General Settings > Languages > Terraform

Terraform provider versions

The respective Terraform providers are frequently updated. New resources, properties and default values are added. At the same time, others are deprecated or dropped. For this reason, the Terraform analysis is defensive by default: some issues will be automatically silenced to avoid raising false positives. In order to get a more precise analysis you can specify the provider versions your code supports via a parameter.

AWS: sonar.terraform.provider.aws.version Azure: sonar.terraform.provider.azure.version GCP: For Google Cloud Platform, no versions are currently considered in the analysis.

Accepted are versions having the format: X.Y.Z, X.Y or X.

Examples:

• sonar.terraform.provider.aws.version=1.93.4
• sonar.terraform.provider.aws.version=3.4
• sonar.terraform.provider.aws.version=4