name: tofu
binary: tofu
aliases: []
category:
- infra
lang:
- hcl
summary: OpenTofu infrastructure as code CLI.
homepage: https://github.com/opentofu/opentofu
docs: https://opentofu.org/docs/
detect:
version_args:
- version
local:
files:
- main.tf
- versions.tf
- .terraform.lock.hcl
dirs:
- .terraform
package_json:
package_manager_prefixes: []
use_when:
- Inspect or plan OpenTofu-compatible infrastructure changes
avoid_when:
- The task does not explicitly involve infrastructure
risk:
level: high
effects:
- network_access
- requires_auth
- remote_read
- remote_write
- cloud_mutation
- secret_exposure
requires_auth: true
destructive: true
confirmation_required_for:
- apply
- destroy
- state changes
guardrails:
- Do not run tofu apply or destroy without explicit confirmation.