From 0bddfa0e5e61bc11a9a99010addd5e60c5d43e23 Mon Sep 17 00:00:00 2001 From: "claude[bot]" Date: Mon, 6 Apr 2026 11:57:42 +0000 Subject: [PATCH] fix: pin terraform-mcp-server Docker image to explicit version tag Both terraform plugin manifests referenced `hashicorp/terraform-mcp-server` without a version tag, which silently pulls `latest` and makes the setup non-reproducible. Pin to `0.5.0` (current stable release) so users get a consistent, auditable image. Co-Authored-By: Claude Code --- terraform/code-generation/.claude-plugin/plugin.json | 2 +- terraform/module-generation/.claude-plugin/plugin.json | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/terraform/code-generation/.claude-plugin/plugin.json b/terraform/code-generation/.claude-plugin/plugin.json index ff0b9b0..89cbc02 100644 --- a/terraform/code-generation/.claude-plugin/plugin.json +++ b/terraform/code-generation/.claude-plugin/plugin.json @@ -19,7 +19,7 @@ "--rm", "-e", "TFE_TOKEN", "-e", "TFE_ADDRESS", - "hashicorp/terraform-mcp-server" + "hashicorp/terraform-mcp-server:0.5.0" ], "env": { "TFE_TOKEN": "${TFE_TOKEN}", diff --git a/terraform/module-generation/.claude-plugin/plugin.json b/terraform/module-generation/.claude-plugin/plugin.json index 3130104..caaa940 100644 --- a/terraform/module-generation/.claude-plugin/plugin.json +++ b/terraform/module-generation/.claude-plugin/plugin.json @@ -19,7 +19,7 @@ "--rm", "-e", "TFE_TOKEN", "-e", "TFE_ADDRESS", - "hashicorp/terraform-mcp-server" + "hashicorp/terraform-mcp-server:0.5.0" ], "env": { "TFE_TOKEN": "${TFE_TOKEN}",