Slack

Blog

Digger

Getting Started

Digger is an open-source CI/CD orchestrator for Terraform

About Digger

How it works

Pricing

Github Actions + AWS

Github Actions + GCP

Multiple AWS accounts

digger.yml

For serious usecases always use a pinned version which is of the form @vX.Y.Z since this will download compiled binary. Addition to being faster to run, it is also more secure than using a commit from a branch

Specifying version

By default Digger checks out latest code from the branch prior to every run. So you don't need to configure checkout in your workflow file.

Disable auto-checkout

Segregate cloud accounts

In this tutorial we will be using a repository in order to configure a terraform pipeline [https://github.com/diggerhq/digger demo workspaces](https://github.com/diggerhq/digger%5Fdemo%5Fworkspaces). In order to use Terraform workspaces with Digger we follow the steps below.

Using Workpaces

Using Terragrunt

Apply on Merge

You can configure Digger to run Checkov policy-as-code as an additional step:

Using Checkov

This feature is in early development. If you find something that can be improved, please let us know by [filing an issue](https://github.com/diggerhq/digger/issues)

Using Infracost

This feature is in active development. If you find something that can be improved, please let us know by [filing an issue](https://github.com/diggerhq/digger/issues)

Using OPA (Conftest)

Commenting stragegies

Terragrunt project generation

Setting up Digger EE

Projects

You can specify a Workspace for a project by using the `workspace` option in `digger.yml`

Workspaces

PR-level locks

CommentOps

Plan preview

Plan Persistence

Custom workflows

RBAC via OPA guide

Digger runs without a backend but uses a DynamoDB table to keep track of all the locks that are necessary for locking PR projects. On the first run in your AWS account digger checks for the presense of `DiggerDynamoDBLockTable` and it requires the following policy for the DynamoDB access:

Introduction

Getting Started

How-to Guides

Configuration

Digger Enterprise

Features

Digger API

AWS-specific

GCP-specific

Azure-specific

Troubleshooting Errors

Getting Started