hard20 pts · first answer countsterraformsupply-chain-security

Provider checksum mismatch in CI

Developers on macOS commit .terraform.lock.hcl. CI on Linux then fails with the error below. What is the correct fix?

Error: Failed to install provider

the current package for registry.terraform.io/hashicorp/aws 5.82.0
doesn't match any of the checksums previously recorded in the
dependency lock file

A.Delete the lock file and add it to .gitignore, so each machine and CI runner records its own hashes.B.Loosen the provider constraint to version = ">= 0" so any package build is accepted.C.Run terraform init -upgrade on every CI run so the recorded hashes are refreshed there.D.Run terraform providers lock with -platform for each OS used and commit the updated lock file.

Discussion 0

Join free to post in the discussion.

Provider checksum mismatch in CI

Discussion 0

Related questions