Pipelines uses a GitHub app in GitHub and a GitLab machine user in GitLab to authenticate with the respective Source Code Management (SCM) provider.
When authenticating with cloud providers, Pipelines will perform an OIDC handshake between the repository in the SCM and a principal in a given environment to acquire temporary, least privilege credentials for the actions it needs to perform in that environment. Pipelines also provides an escape-hatch mechanism which allows developers to implement a per-environment custom authentication mechanism to authenticate with arbitrary APIs and pass those credentials into Terragrunt at runtime.
Terragrunt Pipelines
is an out-of-the-box, best practices, secure CI/CD pipeline, built for Terragrunt, by the creators of Terragrunt.
Terragrunt Drift Detection
regularly compares your live cloud resources to your IaC and automatically opens pull requests to eliminate infrastructure drift.
Terragrunt Patcher
is a dependency management tool that keeps your OpenTofu/Terraform modules up to date, even through breaking changes.
