Infracost scans for Terraform code changes and checks over 3 million prices to create a simple, understandable cost estimate before any resources are launched.

Infracost Community

Hi!
I am new to InfraCost, and have a question: Is it so that InfraCost bots clones private repositories? and is there a way to avoid it or its just the way that it works?

Hello! If you are using GitHub or GitLab app integrations, then yes, our runners will clone a repo to estimate them. You can read about the benefits here: <https://www.infracost.io/docs/guides/source_control_benefits/>.

If you don't want your private repos being cloned, the only option is to use Infracost in your CI/CD pipeline, but you'll have to do some extra steps (described in the link above).

Also, you can read about Infracost's security and privacy here <https://www.infracost.io/docs/faq/#security-and-privacy>

May I ask why this may be a concern for you?

I was not directly participating in our internal discussion, but generally the issue is that our company's policy does not allow that cloning.