By design the "-raw" option to "tofu output" writes the literal output
value directly to stdout without any quoting or escaping, and so it's
risky to use it with an output value that could be controlled by an
attacker when stdout is a terminal.
This risk is inherent in the purpose of this option and is part of the
reason why this is not the default behavior (OpenTofu returns a quoted
representation of an output string by default) so here we just make that
risk explicit in the documentation, in the hope that operators will use
this operation mindfully.
Signed-off-by: Martin Atkins <mart@degeneration.co.uk>
* Initial renaming, rewriting and cleaning up wave for the CLI docs.
Signed-off-by: Jakub Martin <kubam@spacelift.io>
* More renaming.
Signed-off-by: Jakub Martin <kubam@spacelift.io>
* More renaming.
Signed-off-by: Jakub Martin <kubam@spacelift.io>
* More renaming.
Signed-off-by: Jakub Martin <kubam@spacelift.io>
* Remove tutorial references.
Signed-off-by: Jakub Martin <kubam@spacelift.io>
* Post-review fixes.
Signed-off-by: Jakub Martin <kubam@spacelift.io>
---------
Signed-off-by: Jakub Martin <kubam@spacelift.io>
