Apply the safe fixes to Terraform source
apply_fixesApply mechanically-safe Terraform fixes from scan findings to source, returning patched HCL. Skips unverified fixes with reasons, requiring manual handling.
Instructions
Apply the mechanically-safe fixes from scan_terraform to Terraform source and return the patched HCL. Pass the file content plus the findings you want fixed (each as {check_id, resource_address}). Only fixes on the hand-verified allowlist are applied; everything else is returned in skipped with the reason, and must be applied by hand. Never overwrites a value that is wired to a variable or expression. Returns content — it does not write to disk.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| fixes | Yes | ||
| content | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||