使用 Homebrew 安装 terrahash

项目链接

• 主页

命令和别名

• terrahash

项目历史

The public GitHub repository was created in June 2024. Its README explicitly labels the project as early-stage software, while documenting the core behavior: evaluate initialized Terraform configuration, generate hashes for modules, and store them in a .terraform.module.lock.hcl file analogous to Terraform's provider lock file.

The tool's narrow purpose is supply-chain control for Terraform modules. It checks the lock file against current module hashes and version constraints, then reports changed hashes, changed versions, or missing modules.

采用历史

Adoption appears niche and security-focused rather than broad. Repository metadata showed a small but visible public audience by July 2026, and Homebrew metadata lists a brew formula for the CLI.

使用方式

The README describes three central commands: terrahash init to create a module lock file, terrahash check to validate current modules against it, and terrahash upgrade to update the lock file after approved changes.

The project is meant to run in CI so deployments can fail when Terraform module code or version constraints diverge from the approved lock file.

为什么软件包爱好者会关心

For package nerds, TerraHash is interesting because it fills a small gap in Terraform's lock-file story: Terraform has a provider lock file, while this tool experiments with a separate module lock file that can be installed as a simple CLI.

时间线

• 2024: Public GitHub repository created.
• 2024: README documents init, check, and upgrade workflows around .terraform.module.lock.hcl.
• 2026: Homebrew metadata lists terrahash as a packaged CLI.

Related projects

• Terraform supplies the module system and provider lock-file pattern that TerraHash mirrors.
• Terragrunt and Terramate are adjacent Terraform workflow tools, but TerraHash is focused specifically on module hash verification.

来源

• Input package metadata: source_facts.package-manager, source_facts.package-manager-url
• README: https://github.com/ned1313/terrahash#readme
• Repository metadata: https://api.github.com/repos/ned1313/terrahash