[feature] Redact / Mask atlantis output

[so0k]

Is there any way to redact Atlantis output into the PR comments?

In our company there is a concern with secrets in PR comments and we would need finer control over the comments created by Atlantis.

for Terraform, opencredo/terrahelp provides masking functionality by piping Terraform output through it and masking any variables that are in the tfvars file.

At this stage I see 2 options:

1. Provide a way to pipe terraform output through other binaries before sending it to the github comment renderer (this would be the most flexible way)
2. Make the comment templates configurable and including a functionmap that can help masking (most likely too complicated as the masking functions would need to be compiled within Atlantis)

or maybe there is a workaround I'm not seeing?

[lkysow]

@so0k I think I favour option 1 (for now at least). If there was a way to configure exactly what command was run for plan/apply, then you could run terraform with the terrahelp wrapper.

I'm going to be looking at this soon.

[atlantisbot]

This issue was migrated to runatlantis/atlantis#46. Read about why here.