chore: replace tfsec by trivy

.gitlab-ci.yml

@@ -1,6 +1,3 @@
-variables:
-  SHARED_RUNNER_TAG: ops4ops-claranet
-
 include:
   - project: claranet/guildes/pipeline/terraform-templates/terraform-gitlab-ci-templates
     ref: v0.33.2

.pre-commit-config.yaml

@@ -17,11 +17,21 @@ repos:
       - id: detect-private-key
 
 - repo: https://github.com/antonbabenko/pre-commit-terraform.git
-  rev: v1.89.0
+  rev: v1.90.0
   hooks:
     - id: terraform_fmt
+    - id: terraform_providers_lock
+      args:
+        - --args=-platform=linux_amd64
+        - --args=-platform=darwin_amd64
+        - --args=-platform=darwin_arm64
     - id: terraform_tflint
-    - id: terraform_tfsec
+      args:
+        - --args=--recursive
+    - id: terraform_trivy
+      args:
+        - --args=--severity HIGH,CRITICAL
+        - --args=--skip-dirs '**/.terraform'
 
 - repo: https://github.com/compilerla/conventional-pre-commit
   rev: v3.2.0

.tool-versions

@@ -1,5 +1,5 @@
-terraform      latest
+opentofu       1.7.1
 pre-commit     3.7.1
-tflint         0.51.1
-tfsec          1.28.6
 terraform-docs 0.16.0
+tflint         0.51.1
+trivy          0.51.4