tfvars-lint — catch bad .tfvars before terraform plan even runs

Catch bad .tfvars before terraform plan even runs: validate a .tfvars file against a module's variables.tf schema — types, required, and unknown vars.