Skip to content
TerraGate

Terraform PR review

Start a risk review

Upload Terraform plan JSON, choose the policy context, and optionally attach the GitHub pull request that produced the change.

Review a Terraform plan

Use JSON produced by terraform show -json.

Optional GitHub PR context

Attach changed-file and redacted patch evidence to this plan review. A PR URL does not replace the Terraform plan.

Live context requires a configured server-side GitHub credential.
Choose a plan JSON first.

Plan privacy

Terraform plans can expose secrets, resource names, provider values, and topology. Uploaded plans are stored as review artifacts and redacted before any optional AI enrichment.

What happens after submit

Validate Terraform plan JSON and summarize changed resources.
Redact secret-like values before reviewer nodes use the artifact.
Run deterministic security, cost, reliability, governance, and compliance checks.
Generate evidence-backed findings, remediations, runbook steps, and a PR comment draft.
Require approval before posting a GitHub comment or committing a suggested patch.

Generate a plan file

terraform plan -out=tfplan.binary
terraform show -json tfplan.binary > tfplan.json

Runtime capabilities

Values below are reported by this environment. They describe active behavior without exposing credentials or secret configuration.

Private runtime
Frontend

Local or self-hosted

Current browser origin

Active
API

AWS API Gateway + Lambda

Checking runtime capabilities

Guarded