Bogform is a cheap, secure, and friendly way to manage your infrastructure as code, without paying for a hosted platform. It's a fork of OpenTofu that keeps the same language and workflow, so existing projects move over by swapping the executable.
Documentation | Install | Moving from OpenTofu or Terraform
bogform init
bogform plan
bogform apply- Local: run the
bogformcommand on your own machine.bogform uishows your pipeline reports in a local dashboard, with nothing to host. - Repository: plan on pull requests and apply on merge or on demand, using GitHub Actions, GitLab
CI, Azure Pipelines, or Bitbucket Pipelines.
bogform ci initwrites the pipeline, signed in to AWS or Azure with OIDC, and aBOGFORM.mdthat explains the setup to people and coding agents. - Self-hosted dashboard: an optional web app that you deploy to your own AWS account, using CloudFront, AWS Lambda, and any Postgres database. It shows your runs and drift, sends alerts to Slack, Teams, email or a webhook, and starts runs in your existing pipelines, so there are no runners to host.
- Infrastructure as code: describe your infrastructure in configuration that you can version, review, and reuse.
- Execution plans: see exactly what will change before anything does.
- Resource graph: changes are ordered by their dependencies and run in parallel where possible.
- Existing providers and modules: use the providers and modules from the OpenTofu Registry.
- State encryption: encrypt state and plan files with a key provider you control. The passphrase can come from an environment variable, your OS keychain, AWS SSM or Azure Key Vault.
- State in your repository: the
gitbackend keeps encrypted state on a branch, withbogform state historyandstate restoreto undo a bad change. - Safer pull requests: plans list destroys first and run built-in checks for common AWS and Azure mistakes, applies refuse destroys unless a person allows them, and plans can include a monthly cost estimate.
- Easy to adopt:
bogform migrate tfcleaves HCP Terraform,bogform adoptwrites import blocks for resources you already have,bogform bootstrapsets up pipeline access to AWS or Azure, andbogform doctorchecks the result.
brew install --cask bogware/tap/bogform # macOS
scoop bucket add bogware https://github.com/bogware/scoop-bucket; scoop install bogform # Windows
curl -fsSL https://raw.githubusercontent.com/bogware/bogform/main/scripts/install.sh | sh # Linux and othersSee Installing Bogform for winget, packages and containers.
Bogform reads existing .tf and .tofu files, TF_* environment variables, state, and lock files.
It adds .bog files and BOG_* variables, which take priority. The HCP Terraform cloud block and
the remote backend aren't supported, and Bogform explains how to move your state if it finds them.
- To report a bug or suggest a feature, open an issue.
- To contribute, read the contribution guide.
- To report a vulnerability, follow the security policy.
Bogform is licensed under the Mozilla Public License 2.0. It's derived from OpenTofu, which in turn derives from Terraform as it was licensed under the MPL 2.0. Copyright notices for those projects are kept in the source files. Bogform isn't affiliated with or endorsed by the OpenTofu project, the Linux Foundation, or HashiCorp.