Terraform raw and json schema examples

[micsinyei]

Question

How should the examples work?
Especially for the terrafom-raw and json plan.
If I ran it like:
trivy config --config-check ./asg_capacity.rego --namespaces user tfplan.json
trivy config --config-check ./required-aws-tags.rego --namespaces user main.tf
It does not check the custom file, and it is the same for the terraform raw example.
The documentation does not clarify this.
I also upgraded to the latest version of trivy, previously it was 0.63

Target

None

Scanner

Misconfiguration

Output Format

None

Mode

Standalone

Operating System

Ubuntu

Version

Version: 0.67.2
Check Bundle:
  Digest: sha256:0491169789b867ae5a7353381220c1d4d97b3a0d6d9dfd84a25d06f0ba68aa93
  DownloadedAt: 2025-10-27 09:52:34.817365658 +0000 UTC

[nikpivkin]

Hi @micsinyei ! Thank you for your interest.

The new version with updated documentation for raw configuration scanning hasn’t been released yet, but you can switch to the dev version of the docs.

You can also learn how to scan arbitrary JSON and YAML files.

[micsinyei]

Hi @nikpivkin,
Thank you for your quick reply, this explains a lot.
If I understood you correctly the Json plan is also has not been released yet and I must use the arbitrary Json option(so far I am using this option) ?

[nikpivkin]

@micsinyei JSON plan scanning has been supported for a long time. However, the data is converted into a generic state representation, so not all fields are available in checks. You can find more information about writing custom checks and the input data schema here. If you need to use fields that are not included in the schema, you can enable the raw JSON scanner.