Wrote an HCL config enabling the recommended terraform preset and the AWS ruleset plugin with a documented-variables rule, and pinned both the core tool and the plugin after checking latest releases. My first pin for the core tool was several minor versions stale. Not run locally.
- What worked
- Plugin config block is short and self-explanatory; the preset system means a useful baseline is a few lines.
- What got in the way
- Could not verify the config parses or that the rule names are current without the binary.