tfprovidercheck 1.0.2 (new formula)

.github/autobump.txt

@@ -3230,6 +3230,7 @@ tf-profile
 tfautomv
 tfel
 tfmigrate
+tfprovidercheck
 tfproviderlint
 tfschema
 tfsec

Formula/t/tfprovidercheck.rb

@@ -0,0 +1,49 @@
+class Tfprovidercheck < Formula
+  desc "CLI to prevent malicious Terraform Providers from being executed"
+  homepage "https://github.com/suzuki-shunsuke/tfprovidercheck"
+  url "https://github.com/suzuki-shunsuke/tfprovidercheck/archive/refs/tags/v1.0.2.tar.gz"
+  sha256 "d6330db7e927dcd89281c2ff8b3545914489a5a09b59e73def8d6525ec8d9596"
+  license "MIT"
+  head "https://github.com/suzuki-shunsuke/tfprovidercheck.git", branch: "main"
+
+  depends_on "go" => :build
+  depends_on "opentofu" => :test
+
+  def install
+    system "go", "build", *std_go_args(ldflags: "-s -w -X main.version=#{version}"), "./cmd/tfprovidercheck"
+  end
+
+  test do
+    assert_match version.to_s, shell_output("#{bin}/tfprovidercheck -version")
+
+    (testpath/"test.tf").write <<~HCL
+      terraform {
+        required_version = ">= 1.0"
+
+        required_providers {
+          aws = {
+            source = "hashicorp/aws"
+            version = "~> 5"
+          }
+        }
+      }
+
+      provider "aws" {
+        region = var.aws_region
+      }
+    HCL
+
+    # Only google provider and azurerm provider are allowed
+    (testpath/".tfprovidercheck.yaml").write <<~YAML
+      providers:
+        - name: registry.terraform.io/hashicorp/google
+          version: ">= 4.0.0"
+        - name: registry.terraform.io/hashicorp/azurerm
+    YAML
+
+    system "tofu", "init"
+    json_output = shell_output("tofu version -json")
+    output = pipe_output("#{bin}/tfprovidercheck 2>&1", json_output, 1)
+    assert_match "Terraform Provider is disallowed", output
+  end
+end