Merge branch 'main' into add-spinner

Author: RoseSecurity

.github/workflows/codeql.yml

@@ -0,0 +1,48 @@
+name: "CodeQL Scanning"
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+  schedule:
+    - cron: '00 08 * * 1'
+
+jobs:
+  analyze:
+    name: Analyze (${{ matrix.language }})
+    runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
+    permissions:
+      security-events: write
+      packages: read
+
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+        - language: go
+          build-mode: autobuild
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+      
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v3
+      with:
+        languages: ${{ matrix.language }}
+        build-mode: ${{ matrix.build-mode }}
+        
+    - if: matrix.build-mode == 'manual'
+      shell: bash
+      run: |
+        echo 'If you are using a "manual" build mode for one or more of the' \
+          'languages you are analyzing, replace this with the commands to build' \
+          'your code, for example:'
+        echo '  make bootstrap'
+        echo '  make release'
+        exit 1
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v3
+      with:
+        category: "/language:${{matrix.language}}"

Dockerfile

@@ -23,7 +23,7 @@ RUN <<EOF
     go build -v -o ./terramaid main.go
 EOF
 
-FROM alpine:3.20.2
+FROM alpine:3.20.3
 COPY --from=builder /usr/src/terramaid/terraform /usr/local/bin/terraform
 COPY --from=builder /usr/src/terramaid/terramaid /usr/local/bin/terramaid
 

README.md

@@ -66,19 +66,35 @@ flowchart TD
 
 ## Installation
 
-Homebrew installation:
+### Homebrew
 
 ```sh
 brew install terramaid
 ```
 
-If you have a functional go environment, you can install with:
+If you have a functional Go environment, you can install with:
 
 ```sh
 go install github.com/RoseSecurity/terramaid@latest
 ```
 
-Build from source:
+### Apt
+
+To install packages, you can quickly setup the repository automatically:
+
+```sh
+curl -1sLf \
+  'https://dl.cloudsmith.io/public/rosesecurity/terramaid/setup.deb.sh' \
+  | sudo -E bash
+```
+
+Once the repository is configured, you can install with:
+
+```sh
+apt install terramaid=<VERSION>
+```
+
+### Source
 
 ```sh
 git clone git@github.com:RoseSecurity/terramaid.git
@@ -132,3 +148,23 @@ docker run -it -v $(pwd):/usr/src/terramaid rosesecurity/terramaid:latest
 ## CI/CD Integrations
 
 Terramaid is designed to easily integrate with existing pipelines and workflows. For more information on sample GitHub Actions and GitLab CI/CD Pipelines, feel free to check out [GitHub Actions Integrations](./docs/GitHub_Actions_Integration.md) and [Gitlab Pipelines Integrations](./docs/GitLab_Pipelines_Integration.md).
+
+## Contributing
+
+For bug reports & feature requests, please use the [issue tracker](https://github.com/rosesecurity/terramaid/issues).
+
+PRs are welcome! We follow the typical "fork-and-pull" Git workflow.
+ 1. **Fork** the repo on GitHub
+ 2. **Clone** the project to your own machine
+ 3. **Commit** changes to your own branch
+ 4. **Push** your work back up to your fork
+ 5. Submit a **Pull Request** so that we can review your changes
+
+> [!TIP]
+> Be sure to merge the latest changes from "upstream" before making a pull request!
+
+### Many Thanks to Our Contributors
+
+<a href="https://github.com/rosesecurity/terramaid/graphs/contributors">
+  <img src="https://contrib.rocks/image?repo=rosesecurity/terramaid&max=24" />
+</a>

go.mod

@@ -10,7 +10,7 @@ require (
 	github.com/hashicorp/terraform-exec v0.21.0
 	github.com/mattn/go-colorable v0.1.13
 	github.com/spf13/cobra v1.8.1
-	golang.org/x/text v0.17.0
+	golang.org/x/text v0.19.0
 )
 
 require (

go.sum

@@ -87,6 +87,10 @@ golang.org/x/term v0.1.0 h1:g6Z6vPFA9dYBAF7DWcH6sCcOntplXsDKcliusYijMlw=
 golang.org/x/term v0.1.0/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/text v0.17.0 h1:XtiM5bkSOt+ewxlOE/aE/AKEHibwj/6gvWMl9Rsh0Qc=
 golang.org/x/text v0.17.0/go.mod h1:BuEKDfySbSR4drPmRPG/7iBdf8hvFMuRexcpahXilzY=
+golang.org/x/text v0.18.0 h1:XvMDiNzPAl0jr17s6W9lcaIhGUfUORdGCNsuLmPG224=
+golang.org/x/text v0.18.0/go.mod h1:BuEKDfySbSR4drPmRPG/7iBdf8hvFMuRexcpahXilzY=
+golang.org/x/text v0.19.0 h1:kTxAhCbGbxhK0IwgSKiMO5awPoDQ0RpfiVYBfK860YM=
+golang.org/x/text v0.19.0/go.mod h1:BuEKDfySbSR4drPmRPG/7iBdf8hvFMuRexcpahXilzY=
 golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d h1:vU5i/LfpvrRCpgM/VPfJLg5KjxD3E+hfT1SH+d9zLwg=
 golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d/go.mod h1:aiJjzUbINMkxbQROHiO6hDPo2LHcIPhhQsa9DLh0yGk=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=