Plugins

Plugins extend the functionality of Spacelift, allowing you to integrate with third-party services, automate tasks, and enhance your workflows.

Spacelift supports a variety of plugins, which can be used to perform actions such as sending notifications, managing resources, or integrating with external systems. You can also develop your own custom plugins using our plugin SDK spaceforge.

Available plugins

Navigate to Integrate Services > Plugins in the Spacelift UI, then click Templates to browse and install available plugins. You can also click Create template to create custom plugins.

The following plugins are available in the Spacelift plugin repository:

• Infracost: Estimate infrastructure costs before deployment.
• SOPS: Decrypt secrets using cloud KMS services (AWS KMS, Azure Key Vault, GCP KMS).
• Wiz: Cloud security scanning and compliance reporting.
• Checkov: Static security analysis for IaC files.
• Terrascan: Detect compliance and security violations.
• Trivy: Comprehensive vulnerability and misconfiguration scanner.
• TruffleHog: Secret and credential detection (800+ types).
• Environment Manager: Centralized environment variable management across stacks via YAML.
• Envsubst: Environment variable substitution for Kubernetes manifests.
• OpenTofu Tracing: OpenTelemetry tracing for OpenTofu operations.

For detailed plugin documentation, configuration examples, and source code, visit the plugin repository. If you've built a plugin that could benefit the community, consider submitting it to the repository.

Changing the plugin template

When a template is installed, the resulting policies, webhooks, contexts, etc. are locked in the UI and cannot be changed. However, some plugin templates contain default values you might want to change.

1. Navigate to Integrate Services > Plugins in the Spacelift UI.
2. Click Templates.
3. Click the three dots beside the plugin template you want to change, then click New template from this.
4. Make your desired changes and click Create.

Installing plugins

1. Navigate to Integrate Services > Plugins in the Spacelift UI.
2. Click Templates.
3. Click the three dots beside the plugin template you want to use, then click Install.
4. Edit the plugin details:
   • Installation name: Use the template name or enter a short, descriptive name for the plugin. This will identify the plugin in the Spacelift UI.
   • Stack label: The autoattach label that will be used to automatically attach the plugin to stacks. You can also use the * wildcard to attach the plugin to all stacks in a space.
   • Space: Select the space(s) where the plugin will be installed.
   • Labels (optional): Organize plugins by assigning labels to them.
5. Depending on the plugin template, fill out additional configuration options as needed.
   • For example, the Infracost plugin template requires the Infracost API Key details.
6. Click Install.

After a plugin is installed, you can view its details on the Account plugins tab.

Using a plugin

Plugins can only attach via the autoattach label, which is the value provided in the Stack label field.

1. Navigate to Ship Infra > Stacks.
2. Beside the stack you want to attach a plugin to, click the three dots, then click Settings.
3. Under Labels, enter the label you provided in the plugin's Stack label field.
4. Click Save.

For example, if you installed Infracost with the infracost stack label, you can attach it to a stack by adding the infracost label to the stack.

Plugin outputs

Plugins may output useful information. If a plugin produces outputs, you can see them in the Plugin Outputs tab of the run details page.

Here's an example of the Wiz plugin output:

Plugin development

Getting started with custom plugins

Custom plugins allow you to extend Spacelift's functionality to meet your specific needs. The spaceforge SDK provides templates and tools for creating, testing, and publishing plugins.

Plugin architecture

Spacelift plugins are packaged as .yaml files. Each plugin defines:

• Execution phases: When the plugin runs (e.g., before_init, after_plan, after_apply).
• Input parameters: Configuration options exposed during installation. At least one input parameter is required.
• Output artifacts: Files, logs, or data produced by the plugin.
• Dependencies: Required tools, libraries, or external services.

Plugin lifecycle

1. Installation: Plugin template is installed into your account with specific configuration.
2. Attachment: Plugin automatically attaches to stacks via autoattach labels.
3. Execution: Plugin runs during appropriate run phases based on its configuration.
4. Output: Plugin generates logs, artifacts, or external integrations.
5. Cleanup: Temporary resources are cleaned up after execution.

Contributing to the plugin ecosystem

The Spacelift plugin ecosystem thrives on community contributions. Here's how you can get involved:

Plugin templates

• Contribute new plugin templates to the spaceforge repository.
• Improve existing plugin documentation and examples.
• Submit bug fixes and feature enhancements.

Contribution process

1. Fork the repository: Create your own fork of the spaceforge repo.
2. Create feature branch: git checkout -b feature/my-awesome-plugin.
3. Develop and test: Follow the development guidelines and test thoroughly.
4. Submit pull request: Include clear description and test results.
5. Review process: Core maintainers will review and provide feedback.

Plugin submission guidelines

Quality standards

• Documentation: Comprehensive README with setup instructions.
• Security: Follow security best practices, no hardcoded secrets.
• Compatibility: Test with supported Spacelift features and IaC tool versions.

Plugin categories

Popular plugin categories include:

Category	Examples
Security & Compliance	Vulnerability scanning, policy enforcement, compliance reporting.
Cost Management	Cost estimation, budget alerts, resource optimization.
Notifications	Slack, Discord, email, webhooks for run status updates.
Monitoring & Observability	Metrics collection, log aggregation, alerting.
CI/CD Integration	GitHub Actions, GitLab CI, Jenkins pipeline triggers.
Cloud Services	Provider-specific integrations and automation.
Testing	Infrastructure testing, compliance validation, performance testing.