tfstate-audit indexes your Terraform state history into a local SQLite database, making it easy to search across attributes, outputs, and metadata.
Built to answer questions like "where did this credential come from?" and "when did this resource first appear?", without manually digging through object versions.
Local-first and privacy-focused: runs entirely on your machine, read-only (only lists/downloads historical versions), redaction on by default, and no telemetry.
Features:
Git-log-like timeline of state changes
Diff any two versions
Powerful search DSL across attributes and outputs
Generate Markdown evidence packs for audits
Supports S3, GCS, Azure Blob Storage, HCP Terraform, and local files
