Powerful features that make Terraform plan reviews faster, easier, and more effective.
The features that make the biggest difference in your Terraform reviews
Character-level highlighting shows exactly what changed within a value. Added text in green, removed text in red—spot changes instantly.
Renders complex Azure Firewall rule collections as readable tables with protocols, ports, and actions clearly displayed.
Renders Network Security Group rules as readable tables, making security changes easy to audit at a glance.
Resolves cryptic GUIDs to human-readable names: Principal IDs become "Jane Doe", Role Definition IDs become "Reader", and Scope IDs become "rg-myresourcegroup".
Handles large text blocks (like JSON policies or scripts) by showing computed diffs with inline highlighting instead of raw text walls.
Designed and tested for rendering in pull request comments on Azure DevOps Services and GitHub. Reports look great where they matter most.
Displays friendly names for resources instead of complex resource ID strings. See "kv-tfplan2md" instead of a 200-character Azure resource ID.
Shows all variables (regular and secret) in variable group changes with full metadata. Secret values displayed as "(sensitive / hidden)" while preserving names and attributes.
Solid capabilities that improve readability and usability
High-level overview table showing counts of adds, changes, replaces, and destroys by resource type.
Groups resources logically by their Terraform module hierarchy (e.g., module.network.module.monitoring).
Hides verbose resource details inside expandable sections to keep PR comments readable and scannable.
Renders resource tags with specific icons and formatting for easy scanning of metadata.
Adds context-aware icons for common attributes like Locations (🌍), IPs (🌐), Ports (🔌), and booleans.
Allows users to completely customize the markdown output using Scriban templates.
Native support and examples for GitHub Actions, Azure DevOps, and GitLab CI. Just pipe terraform output to the Docker container.
Works with any Terraform provider (AWS, GCP, etc.) using standard resource rendering. Azure gets specialized renderers.
In modules, displays just the local resource name (e.g., "hub") instead of the full module path for cleaner summaries.
Security and quality-of-life improvements
Automatically masks values marked as sensitive in Terraform to prevent accidental exposure.
AOT-compiled native binary in 14.7MB FROM scratch container. Sub-second startup, minimal attack surface.
Single --debug flag appends diagnostic info showing principal mapping status, template resolution, and failed ID lookups.
Website supports dark and light theme toggle for comfortable viewing in any environment.