hashicorp/terraform audit

Delivery risk audit on GitHub · Analysed 12 Aug 2026 · GitHub

This delivery risk audit analyses the last 90 days of public commit history for hashicorp/terraform. It identifies files that concentrate bug-fix activity, measures revert frequency as a signal of release instability, and maps contributor spread to highlight knowledge concentration risk. The risk score weights bug-fix commits and reverts for each file, with higher scores indicating files that have required the most corrective attention in the analysed period.

Top Risk Files

File	Risk	Bug Commits	Reverts	Commit touches
internal/command/views/query_policy_test.go	30	3	0	—
internal/command/state_migrate.go	20	2	0	—
internal/command/views/query_operation.go	20	2	0	—
internal/command/views/query_policy.go	20	2	0	—
internal/command/views/query.go	20	2	0	—
internal/command/views/state_migrate.go	20	2	0	—
internal/dag/graph_test.go	20	2	0	—
internal/dag/graph.go	20	2	0	—
.changes/v1.16/BUG FIXES-20260728-043144.yaml	10	1	0	—
.changes/v1.17/BUG FIXES-20260807-121758.yaml	10	1	0	—
.github/workflows/build-terraform-cli.yml	10	1	0	—
.github/workflows/build.yml	10	1	0	—
.github/workflows/changelog-validation.yml	10	1	0	—
.github/workflows/checks.yml	10	1	0	—
.github/workflows/enforce-changelog.yml	10	1	0	—
.github/workflows/equivalence-test-diff.yml	10	1	0	—
.github/workflows/equivalence-test-manual-update.yml	10	1	0	—
.github/workflows/equivalence-test-update.yml	10	1	0	—
go.mod	10	1	0	—
go.sum	10	1	0	—

Other audited repositories

• tlsnojokes-sudo/DPH-Classifieds_audit
• facebook/react
• LiberoNuvola/PRE-RICH-scratch-and-win-game
• kubernetes/kubernetes
• denoland/deno
• opentofu/opentofu
• apache/kafka
• cilium/cilium
• helm/helm
• argoproj/argo-workflows
• istio/istio
• ansible/ansible

All audited repositories →