mattrobinsonsre/terrapod v0.55.0

on GitHub

Open-source platform replacement for Terraform Enterprise. This release hardens and extends the interactive Slack integration.

Highlights

• Guaranteed Slack approval delivery — a run that needs approval always reaches the channel, even if the AI-review step never produced (a background safety net posts it, review-less, rather than leaving it silent). Carried from v0.54.1.
• Confused-deputy-safe account linking — /terrapod link now lands on an explicit confirm screen (naming the Slack identity being bound to your Terrapod account) instead of binding automatically on page load. Binding is always attributed to the acting user.
• Multiple Terrapod deployments in one Slack workspace — give each deployment a distinct slash command (api.config.slack.command, e.g. /terrapod-prod) and a short api.config.slack.label shown in every message, so a shared channel attributes each one. Everything else (linking, RBAC, approvals, notifications) already isolates per deployment.

Security

• Account-link confused-deputy hardening (explicit confirm; bind always to the acting user); a non-consuming preview endpoint (POST /slack/link/preview).

Status

Beta — Slack integration is opt-in and disabled by default (api.config.slack.enabled: false).

Full Changelog: v0.54.1...v0.55.0