quick first impression based on our terraform stack
-
Trunk Check (trunk-io/trunk-action@v1) — best drop-in replacement. No Docker, runs only changed files, native inline annotations, hermetic version pinning. Covers your entire stack (terraform, tflint, checkov, trivy, shellcheck, hadolint, yamllint, markdownlint, gitleaks)
-
reviewdog (reviewdog/action-setup@v1) — most lightweight, fully open. Thin ~10 MB aggregator that pipes any linter's output into inline PR comments. Assemble the pieces yourself.
| Approach |
Weight |
Inline annotations |
Setup |
Vendor |
| Trunk |
Low |
native |
Medium |
Trunk.io (CLI OSS) |
| reviewdog + targeted |
Lowest |
native |
High |
None |
quick first impression based on our terraform stack
Trunk Check (trunk-io/trunk-action@v1) — best drop-in replacement. No Docker, runs only changed files, native inline annotations, hermetic version pinning. Covers your entire stack (terraform, tflint, checkov, trivy, shellcheck, hadolint, yamllint, markdownlint, gitleaks)
reviewdog (reviewdog/action-setup@v1) — most lightweight, fully open. Thin ~10 MB aggregator that pipes any linter's output into inline PR comments. Assemble the pieces yourself.