shellfirm 0.3.9

`shellfirm` will intercept any risky patterns (default or defined by you) and prompt you a small challenge for double verification, kinda like a captcha for your terminal.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118

---
# -- terraform:apply_with_auto_approve --
- test: "terraform apply -auto-approve"
  description: "match command"
  expect_ids: ["terraform:apply_with_auto_approve"]
- test: "terraform    apply    -auto-approve"
  description: "match command with spaces"
  expect_ids: ["terraform:apply_with_auto_approve"]
- test: "terraform    apply    -auto-approv"
  description: "match command with spaces"
  expect_ids: []

# -- terraform:force_unlock_with_force_flag --
- test: "terraform force-unlock -force"
  description: "match command"
  expect_ids: ["terraform:force_unlock_with_force_flag"]
- test: "terraform    force-unlock    -force"
  description: "match command with spaces"
  expect_ids: ["terraform:force_unlock_with_force_flag"]
- test: "terraform  force-unlock"
  description: "invalid command"
  expect_ids: []

# -- terraform:state --
- test: "terraform state mv"
  description: "match command"
  expect_ids: ["terraform:state"]
- test: "terraform state replace-provider"
  description: "match command"
  expect_ids: ["terraform:state"]
- test: "terraform    state mv"
  description: "match command with spaces"
  expect_ids: ["terraform:state"]
- test: "terraform state mv -dry-run"
  description: "skip during the -dry-run flag"
  expect_ids: []
- test: "terraform state replace-provider -dry-run"
  description: "skip during the -dry-run flag"
  expect_ids: []

# -- terraform:workspace_delete_with_force_flag --
- test: "terraform workspace delete -lock-timeout=1 -force"
  description: "match command"
  expect_ids: ["terraform:workspace_delete_with_force_flag"]
- test: "terraform   workspace   delete  - -force"
  description: "match command with spaces"
  expect_ids: ["terraform:workspace_delete_with_force_flag"]
- test: "terraform workspace delete -lock-timeout=1"
  description: "invalid command"
  expect_ids: []

# -- terraform:workspace_delete_without_lock --
- test: "terraform workspace delete -lock=false"
  description: "match command"
  expect_ids: ["terraform:workspace_delete_without_lock"]
- test: "terraform workspace delete -lock=false -force"
  description: "match command with force"
  expect_ids: ["terraform:workspace_delete_with_force_flag", "terraform:workspace_delete_without_lock"]
- test: "terraform   workspace   delete   -lock=false"
  description: "match command with spaces"
  expect_ids: ["terraform:workspace_delete_without_lock"]
- test: "terraform workspace delete"
  description: "invalid command"
  expect_ids: []

# -- terraform:destroy_auto_approve --
- test: "terraform destroy -auto-approve"
  description: "match destroy with auto-approve"
  expect_ids: ["terraform:destroy_auto_approve"]
- test: "terraform  destroy  -auto-approve"
  description: "match destroy with extra spaces"
  expect_ids: ["terraform:destroy_auto_approve"]
- test: "terraform destroy -target=aws_instance.foo -auto-approve"
  description: "match destroy with target and auto-approve"
  expect_ids: ["terraform:destroy_auto_approve"]
- test: "terraform destroy"
  description: "negative: destroy without auto-approve should not match"
  expect_ids: []
- test: "terraform destroy -target=aws_instance.foo"
  description: "negative: destroy with target but no auto-approve should not match"
  expect_ids: []

# -- terraform:state_rm --
- test: "terraform state rm aws_instance.foo"
  description: "match state rm"
  expect_ids: ["terraform:state_rm"]
- test: "terraform  state  rm  aws_instance.foo"
  description: "match state rm with extra spaces"
  expect_ids: ["terraform:state_rm"]
- test: "terraform state rm module.foo"
  description: "match state rm with module"
  expect_ids: ["terraform:state_rm"]
- test: "terraform state list"
  description: "negative: state list should not match"
  expect_ids: []
- test: "terraform state show aws_instance.foo"
  description: "negative: state show should not match"
  expect_ids: []

# ====== EDGE CASE / STRESS TESTS ======

# -- terraform:apply_with_auto_approve edge cases --
- test: "terraform apply -var='foo=bar' -auto-approve"
  description: "EDGE: -var before -auto-approve"
  expect_ids: ["terraform:apply_with_auto_approve"]
- test: "terraform apply plan.tfplan"
  description: "EDGE: applying from saved plan should NOT match"
  expect_ids: []

# -- terraform:destroy_auto_approve edge cases --
- test: "terraform destroy -target=aws_instance.foo -auto-approve"
  description: "EDGE: target before auto-approve"
  expect_ids: ["terraform:destroy_auto_approve"]

# -- terraform:force_unlock edge cases --
- test: "terraform force-unlock LOCK_ID -force"
  description: "match force-unlock with -force after lock ID"
  expect_ids: ["terraform:force_unlock_with_force_flag"]