registry / @storm-software/terraform-tools / 0.66.267

@storm-software/terraform-tools@0.66.267

Tools for managing Terraform infrastructure within a Nx workspace.

Static Scan Results

scanned 20h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 47 file(s), 406 KB of source, external domains: cdn.jsdelivr.net, discord.gg, docs.stormsoftware.com, github.com, join.slack.com, patsullivan.org, public.storm-cdn.com, stormsoftware.com

Source & flagged code

4 flagged

dist/chunk-PPWYTBXH.jsView file

Lines 1-45javascript

1"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }

3var _chunkA6WNSDR7js = require('./chunk-A6WNSDR7.js');

5// ../config-tools/src/utilities/run.ts

6var _child_process = require('child_process');

7var LARGE_BUFFER = 1024 * 1e6;

High

Child Process

Package source references child process execution.

dist/chunk-PPWYTBXH.jsView on unpkg · L5

8var run = (config, command, cwd = _nullishCoalesce(config.workspaceRoot, () => ( process.cwd())), stdio = "inherit", env = process.env) => {

9 return _child_process.execSync.call(void 0, command, {

10 cwd,

11 env: {

12 ...process.env,

13 ...env,

14 CLICOLOR: "true",

15 FORCE_COLOR: "true"

16 },

17 windowsHide: true,

18 stdio,

19 maxBuffer: LARGE_BUFFER,

20 killSignal: "SIGTERM",

21 encoding: "utf8"

22 });

23};

25// src/base/terraform-executor.ts

26var _shelljs = require('shelljs');

27var withTerraformExecutor = (command, executorOptions = {}) => async (_options, context) => {

High

Shell

Package source references shell execution.

dist/chunk-PPWYTBXH.jsView on unpkg · L25

28 return _chunkA6WNSDR7js.withRunExecutor.call(void 0,

29 `Terraform \`${command}\` Command Executor`,

30 async (options, context2, config) => {

31 if (!_shelljs.which.call(void 0, "tofu") || !_shelljs.which.call(void 0, "terraform")) {

32 throw new Error(

33 "Both OpenTofu and Terraform are not installed. Please install one of the two before running this executor."

34 );

35 }

36 if (!_shelljs.which.call(void 0, "terragrunt")) {

37 throw new Error(

38 "Terragrunt is not installed. Please install them before running this executor."

39 );

40 }

41 const {

42 backendConfig = [],

43 planFile,

44 autoApproval,

45 formatWrite,

dist/tsup.config.jsView file

Lines 1-21javascript

1"use strict";Object.defineProperty(exports, "__esModule", {value: true});// tsup.config.ts

2var _tsup = require('tsup');

3var tsup_config_default = _tsup.defineConfig.call(void 0, [

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/tsup.config.jsView on unpkg · L1

dist/chunk-TJMO7T74.jsView file

Lines 24-64javascript

24var _chunkA6WNSDR7js = require('./chunk-A6WNSDR7.js');

26// src/generators/init/init.ts

27var _devkit = require('@nx/devkit');

29// ../config-tools/src/utilities/toml.ts

30var _jtoml = require('@ltd/j-toml');

Source & flagged code

4 flagged · loading source

dist/chunk-PPWYTBXH.jsView file

5// ../config-tools/src/utilities/run.ts L6: var _child_process = require('child_process'); L7: var LARGE_BUFFER = 1024 * 1e6;

High

Child Process

Package source references child process execution.

dist/chunk-PPWYTBXH.jsView on unpkg · L5

25// src/base/terraform-executor.ts L26: var _shelljs = require('shelljs'); L27: var withTerraformExecutor = (command, executorOptions = {}) => async (_options, context) => {

High

Shell

Package source references shell execution.

dist/chunk-PPWYTBXH.jsView on unpkg · L25

dist/tsup.config.jsView file

1"use strict";Object.defineProperty(exports, "__esModule", {value: true});// tsup.config.ts L2: var _tsup = require('tsup'); L3: var tsup_config_default = _tsup.defineConfig.call(void 0, [

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/tsup.config.jsView on unpkg · L1

dist/chunk-TJMO7T74.jsView file

44Cross-file remote execution chain: dist/chunk-TJMO7T74.js spawns dist/chunk-A6WNSDR7.js; helper contains network access plus dynamic code execution. L44: L45: var _child_process = require('child_process'); L46: var _fs = require('fs'); var _fs2 = _interopRequireDefault(_fs); ... L114: env: { L115: ...process.env, L116: ..._optionalChain([options, 'optionalAccess', _18 => _18.env]) ... L144: } L145: return JSON.parse(output2.output); L146: } ... L154: _child_process.execSync.call(void 0, `${processCmd} ${args.join(" ")}`, { L155: cwd: process.cwd(), L156: env: {

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunk-TJMO7T74.jsView on unpkg · L44

Findings

3 High3 Medium3 Low

HighChild Processdist/chunk-PPWYTBXH.js

HighShelldist/chunk-PPWYTBXH.js

HighCross File Remote Execution Contextdist/chunk-TJMO7T74.js

MediumDynamic Requiredist/tsup.config.js

MediumNetwork

MediumEnvironment Vars

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

dist/chunk-PPWYTBXH.jsView file

Lines 1-45javascript

1"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }

3var _chunkA6WNSDR7js = require('./chunk-A6WNSDR7.js');

5// ../config-tools/src/utilities/run.ts

6var _child_process = require('child_process');

7var LARGE_BUFFER = 1024 * 1e6;

High

Child Process

Package source references child process execution.

dist/chunk-PPWYTBXH.jsView on unpkg · L5

8var run = (config, command, cwd = _nullishCoalesce(config.workspaceRoot, () => ( process.cwd())), stdio = "inherit", env = process.env) => {

9 return _child_process.execSync.call(void 0, command, {

10 cwd,

11 env: {

12 ...process.env,

13 ...env,

14 CLICOLOR: "true",

15 FORCE_COLOR: "true"

16 },

17 windowsHide: true,

18 stdio,

19 maxBuffer: LARGE_BUFFER,

20 killSignal: "SIGTERM",

21 encoding: "utf8"

22 });

23};

25// src/base/terraform-executor.ts

26var _shelljs = require('shelljs');

27var withTerraformExecutor = (command, executorOptions = {}) => async (_options, context) => {

High

Shell

Package source references shell execution.

dist/chunk-PPWYTBXH.jsView on unpkg · L25

28 return _chunkA6WNSDR7js.withRunExecutor.call(void 0,

29 `Terraform \`${command}\` Command Executor`,

30 async (options, context2, config) => {

31 if (!_shelljs.which.call(void 0, "tofu") || !_shelljs.which.call(void 0, "terraform")) {

32 throw new Error(

33 "Both OpenTofu and Terraform are not installed. Please install one of the two before running this executor."

34 );

35 }

36 if (!_shelljs.which.call(void 0, "terragrunt")) {

37 throw new Error(

38 "Terragrunt is not installed. Please install them before running this executor."

39 );

40 }

41 const {

42 backendConfig = [],

43 planFile,

44 autoApproval,

45 formatWrite,

dist/tsup.config.jsView file

Lines 1-21javascript

1"use strict";Object.defineProperty(exports, "__esModule", {value: true});// tsup.config.ts

2var _tsup = require('tsup');

3var tsup_config_default = _tsup.defineConfig.call(void 0, [

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/tsup.config.jsView on unpkg · L1

dist/chunk-TJMO7T74.jsView file

Lines 24-64javascript

24var _chunkA6WNSDR7js = require('./chunk-A6WNSDR7.js');

26// src/generators/init/init.ts

27var _devkit = require('@nx/devkit');

29// ../config-tools/src/utilities/toml.ts

30var _jtoml = require('@ltd/j-toml');