Skip to main content

Findings Overview

MonPhare produces findings when it detects issues with Terraform/OpenTofu version constraints. Each finding has a code, severity, and actionable message.

Finding Codes

CodeSeverityDescription
missing-versionerrorModule or provider has no version constraint.
broad-constraintwarningVersion constraint is overly broad (e.g., >= 0.0.0).
wildcard-constraintwarningVersion constraint uses a wildcard (*).
no-upper-boundwarningConstraint has a lower bound but no upper bound.
exact-versioninfoExact version pin prevents automatic patch updates.
prerelease-versioninfoConstraint references a pre-release version.

Severity Levels

LevelMeaning
criticalSevere issue requiring immediate attention.
errorDefinite problem that should be fixed. Causes exit code 2.
warningPotential issue. Causes exit code 1 when --strict is enabled.
infoInformational. No effect on exit code.

Severities can be overridden per finding code using the policies.severity_overrides configuration.