ENGINE / IAC

IaC rules

3 deterministic checks, ordered by canonical rule ID.

3 rules

Rule	Engine	Category	Default
no-comment-cruft Commented-out Terraform/IaC or a section-banner comment — delete it; code carries the what, comments only the why.	IaC	maintainability	error
require-deletion-protection Stateful resource (Cloud SQL, GKE, BigQuery, RDS, ...) must set deletion_protection = true so a stray apply cannot destroy prod data.	IaC	security	error
require-prevent-destroy-on-irreplaceable Bucket, secret, or artifact registry must use a supported literal provider-side deletion guard or lifecycle { prevent_destroy = true }.	IaC	security	error