TFLint
github.com
What it is
TFLint is a local command-line linter for Terraform, with checks supplied by plugins. Its bundled language rules can flag deprecated syntax and unused declarations, while cloud-specific checks look for potential errors in AWS, Azure and GCP configurations, including invalid instance types. It can also enforce best practices and naming conventions. Extend it with plugins, create your own, or write policies in Rego. An optional `--fix` flag can correct issues automatically, and reports can be emitted in default, JSON, Checkstyle, JUnit, compact or SARIF formats. TFLint runs on Linux, macOS and Windows and is free, with no free trial. The project provides a GitHub Action and Docker image; installation options include Homebrew, WinGet and Go. Most files use MPL 2.0, some files in the Terraform package use BUSL 1.1, and release binaries are bound by both licenses. The project recommends verifying release checksums with GitHub CLI artifact attestations and identifies Cosign signatures as deprecated.
Spec sheet
- Purpose
- TFLint is a pluggable Terraform linter whose features are provided by plugins.Read 29 Sep 2026 · github.com
- Integrations
- The project provides a GitHub Action and a Docker image, and supports installation with Homebrew, WinGet, or Go.Read 29 Sep 2026 · github.com
- Support
- The README directs users to the User Guide for usage details and the Developer Guide for development information.Read 29 Sep 2026 · github.com
- License
- The project says most of its files use MPL 2.0, some files in the terraform package use BUSL 1.1, and release binaries are bound by both licenses.Read 29 Sep 2026 · github.com
- Automated fixes
- The command-line interface has a --fix option to fix issues automatically.Read 29 Sep 2026 · github.com
- Best practices
- TFLint can enforce best practices and naming conventions.Read 29 Sep 2026 · github.com
- Cloud checks
- Its key features include finding possible errors for AWS, Azure, and GCP, such as invalid instance types.Read 29 Sep 2026 · github.com
- Extensibility
- Users can add plugins, build their own plugins, or write policies in Rego.Read 29 Sep 2026 · github.com
- Outputs
- Supported output formats include default, JSON, Checkstyle, JUnit, compact, and SARIF.Read 29 Sep 2026 · github.com
- Release availability
- The releases page lists v0.64.0 as the latest release, dated July 17, 2026.Read 29 Sep 2026 · github.com
- Release verification
- The project recommends verifying release checksums with GitHub CLI artifact attestations and marks Cosign signatures as deprecated.Read 29 Sep 2026 · github.com
- Terraform rules
- The bundled Terraform language ruleset can warn about deprecated syntax and unused declarations.Read 29 Sep 2026 · github.com
Plans and prices
Strong points and limits
Strong points
- Flags deprecated syntax and unused declarations.
- Checks AWS, Azure and GCP configurations.
- Can enforce naming conventions and best practices.
- Offers automatic fixes and six output formats.
- Free and available for Linux, macOS and Windows.
Limits
- Checks are provided by plugins.
- No free trial is listed.
- Some files use BUSL 1.1; binaries are bound by both licenses.
Who it suits
TFLint suits Terraform users who want local checks for language issues, cloud-specific configuration errors, or naming and best-practice rules. Teams that need policy checks can write them in Rego or extend the tool with plugins.
Verdict
TFLint combines Terraform language rules with extensible cloud checks and policy options in a local CLI. Its free plan and automated fixes may suit developers who want to include configuration linting in their workflow.
Where Specifiction places it
- Bootable USB Software#18 of 387.6
- IaC Security Scanners#10 of 167.3
- Infrastructure Testing Tools#22 of 287.2