
Security News
Feross on Risky Business Weekly Podcast: npm’s Ongoing Supply Chain Attacks
Socket CEO Feross Aboukhadijeh joins Risky Business Weekly to unpack recent npm phishing attacks, their limited impact, and the risks if attackers get smarter.
@ep-npm/terraform-env-vars
Advanced tools
Utility for transforming Terraform variables to environment variables
The terraform-env-vars
is a small script that receives on stdin
the
Terraform output in JSON format and from the command line the mapping from
Terraform variable names to environment variable names.
Given the above inputs, it does two things:
it validates the Terraform output against the mappings
it displays errors and exits with 1 in case of failures
it prints the list of environment variables on stdout
the variables are separated by =
, following the dotenv format
An example of EDN environment map:
{:terraform_db_user "PGUSER"
:terraform_db_passaword "PGPASSWORD"}
You can also pass a JSON file by using the --json
options:
{"terraform_db_user": "PGUSER",
"terraform_db_passaword": "PGPASSWORD"}
Run terraform-env-vars --help
for a help.
npm install -g @ep-npm/terraform-env-vars
cd a-terraform-dir/ # choose your Terraform deployment dir
terraform output -json | terraform-env-vars --edn env-vars.edn
...
PGUSER="..."
PGPASSWORD="..."
...
See CONTRIBUTING.md.
Copyright 2018 Elastic Path
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.
FAQs
Utility for transforming Terraform variables to environment variables
We found that @ep-npm/terraform-env-vars demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket CEO Feross Aboukhadijeh joins Risky Business Weekly to unpack recent npm phishing attacks, their limited impact, and the risks if attackers get smarter.
Product
Socket’s new Tier 1 Reachability filters out up to 80% of irrelevant CVEs, so security teams can focus on the vulnerabilities that matter.
Research
/Security News
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.