| Rule | Category |
IaC no-comment-cruft Commented-out HCL declarations or decorative divider comments must be removed; retain comments that explain constraints or rationale. | maintainability |
IaC no-dead-environment-input Find undeclared tfvars assignments and potentially redundant scalar values across discovered Terraform environments. | maintainability |
IaC no-environment-conditional Warn when Terraform chooses behavior from deployment-identity comparisons; prefer explicit typed capabilities or values. | architecture |
IaC no-mocked-terraform-test-oracle Warn when a Terraform assertion directly reasserts the same literal injected by a resource, data, or module override. | testing |
IaC no-redundant-variable-validation Flag Terraform variable validation conditions already guaranteed by the variable's type constraint. | maintainability |
IaC no-restated-comment Flag a short comment attached to an HCL declaration when it only repeats that declaration's kind, label, or attribute name. | maintainability |
IaC no-terraform-data-condition Disallow lifecycle conditions attached to terraform_data guard resources. | maintainability |
IaC require-deletion-protection Warn when a curated stateful Terraform resource lacks a proven provider-native deletion guard or literal lifecycle destroy guard. | correctness |
IaC require-prevent-destroy-on-irreplaceable Warn when a curated durable-data container lacks a literal provider-side deletion guard or Terraform lifecycle destroy guard. | correctness |
