TFSEC - CKV_TF_1: "Ensure Terraform module sources use a commit hash". NOTE this is draft - requires further information.

[mikereiddigital]

Expected Behavior

TFSEC is failing with CKV_TF_1 as references to remote modules do not use a ref or a commit hash e.g. https://github.com/ministryofjustice/modernisation-platform-environments/actions/runs/7932068549/job/21657664603?pr=5090.

Actual Behavior

See above.

Steps to Reproduce the Problem

Re-run TFSEC.

Version

No response

Modules

No response

Account

No response

[dms1981]

We don't generally apply fixes to customer code in modernisation-platform-environments, but you could bring this to the attention of the customer?