atmos-lint

Atmos Linting

Use this skill to design or operate Terraform/OpenTofu linting in Atmos. Prefer the native atmos terraform lint command for deliberate lint runs and the tflint hook kind for linting as part of a Terraform lifecycle.

Choose an execution mode

Need	Use
Check one component or every component without plan/apply	atmos terraform lint
Check only changed component sources	atmos terraform lint --affected
Enforce lint before or after a Terraform action	kind: tflint hook
Run a provider-plugin initialization command or a bespoke script	kind: command hook or workflow step

# All Terraform component directories, once each (default)
atmos terraform lint
atmos terraform lint --all

# A component; Atmos selects a stack context deterministically when needed
atmos terraform lint vpc
atmos terraform lint vpc --stack test

# Changed Terraform components only
atmos terraform lint --affected

Atmos resolves the selected component instance before linting. Declare tflint under that component's dependencies.tools to pin the binary version; Atmos installs it and supplies its PATH for that lint execution. A component used by multiple stacks is linted once, with a deterministic stack context used only to resolve its settings and toolchain.

components:
  terraform:
    vpc:
      dependencies:
        tools:
          tflint: "0.59.1"

Do not use atmos toolchain install as a prerequisite for normal component linting when dependencies.tools declares TFLint. Use it only to warm a cache or troubleshoot an interactive shell. For precedence of tool declarations, load atmos-toolchain.

TFLint config discovery

When no hook or workflow explicitly passes --config, Atmos finds .tflint.hcl in this order. The most-specific existing path wins:

1. Component directory
2. Terraform components base path (components.terraform.base_path)
3. Git repository root
4. components.terraform.lint.config (an absolute path or a path relative to the Atmos base path)