Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I'm hoping that Infracost doesn't need the entire state file shipped to an outside service/server, like the one mentioned here does.

State files should be considered secret....

  $ terraform state pull | curl -s -X POST -H "Content-Type: application/json" -d @- https://cost.modules.tf/


They have a jq script[0] that removes everything but the necessary data for the cost estimation.

[0] https://github.com/antonbabenko/terraform-cost-estimation/bl...


Agree, state files can contain sensitive information. We parse the Terraform client side and only send the details to the API that are needed to determine the price, i.e. the instance type, region, etc.




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: