get this working for people not on my machine

Author: Emyrk

go.mod

@@ -108,4 +108,4 @@ require (
 	k8s.io/utils v0.0.0-20241104100929-3ea5e8cea738 // indirect
 )
 
-replace github.com/aquasecurity/trivy => github.com/Emyrk/trivy v0.0.0-20250130184222-11c279ff4cd9
+replace github.com/aquasecurity/trivy => github.com/Emyrk/trivy v0.0.0-20250211144405-6377059f7705

go.sum

@@ -625,8 +625,8 @@ github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 h1:L/gRVlceqvL25
 github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161/go.mod h1:xomTg63KZ2rFqZQzSB4Vz2SUXa1BpHTVz9L5PTmPC4E=
 github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
 github.com/BurntSushi/xgb v0.0.0-20160522181843-27f122750802/go.mod h1:IVnqGOEym/WlBOVXweHU+Q+/VP0lqqI8lqeDx9IjBqo=
-github.com/Emyrk/trivy v0.0.0-20250130184222-11c279ff4cd9 h1:v4RZ1ayXjps3spGYXDWub0U7XmgUEaCAgqX+wEnZ19Y=
-github.com/Emyrk/trivy v0.0.0-20250130184222-11c279ff4cd9/go.mod h1:dJIzxTfeSrUGtDBtbg2AiMbAnbVjo97lsLC9eyAawZI=
+github.com/Emyrk/trivy v0.0.0-20250211144405-6377059f7705 h1:+xVBMqeiopGTM+MbCydHG2K1IJm/Vf0LJYuIm8Rky18=
+github.com/Emyrk/trivy v0.0.0-20250211144405-6377059f7705/go.mod h1:h/k++UOEKWxKbATF5462j0OpzrnYwkqHI0HAcLB5uuY=
 github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.25.0 h1:3c8yed4lgqTt+oTQ+JNMDo+F4xprBf+O/il4ZC0nRLw=
 github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.25.0/go.mod h1:obipzmGjfSjam60XLwGfqUkJsfiheAl+TUjG+4yzyPM=
 github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.48.1 h1:UQ0AhxogsIRZDkElkblfnwjc3IaltCm2HUMvezQaL7s=

log.go

@@ -0,0 +1,15 @@
+package preview
+
+import (
+	"os"
+
+	tlog "github.com/aquasecurity/trivy/pkg/log"
+)
+
+func init() {
+	ll := tlog.New(tlog.NewHandler(os.Stderr, &tlog.Options{
+		Level: tlog.LevelDebug,
+	}))
+	var _ = ll
+	//tlog.SetDefault(ll)
+}

parameter.go

@@ -102,7 +102,8 @@ func richParameterValue(block *terraform.Block) cty.Value {
 		}
 
 		// TODO: Figure out what to do with these diagnostics
-		return markWithDiagnostic(cty.UnknownVal(cty.NilType), diags)
+		var _ = diags
+		return cty.UnknownVal(cty.NilType)
 	}
 
 	return paramValue

plan.go

@@ -35,6 +35,22 @@ func PlanJSONHook(dfs fs.FS, input Input) (func(ctx *tfcontext.Context, blocks t
 
 	var _ = plan
 	return func(ctx *tfcontext.Context, blocks terraform.Blocks, inputVars map[string]cty.Value) {
+		for _, block := range blocks {
+			if block.InModule() {
+
+				x := block.ModuleKey()
+				y := block.ModuleBlock().FullName()
+				var _, _ = x, y
+				fmt.Println(block.ModuleKey())
+				continue
+			}
+
+			err = loadResourcesToContext(block.Context().Parent(), plan.PriorState.Values.RootModule.Resources)
+			if err != nil {
+				panic(fmt.Sprintf("unable to load resources to context: %v", err))
+			}
+		}
+
 		// 'data' blocks are loaded into prior state
 		//plan.PriorState.Values.RootModule.Resources
 		for _, resource := range plan.PriorState.Values.RootModule.Resources {
@@ -63,6 +79,42 @@ func PlanJSONHook(dfs fs.FS, input Input) (func(ctx *tfcontext.Context, blocks t
 	}, nil
 }
 
+func planResources(plan *tfjson.Plan, block *terraform.Block) error {
+	if !block.InModule() {
+		return loadResourcesToContext(block.Context().Parent(), plan.PriorState.Values.RootModule.Resources)
+	}
+
+	var path []string
+	mod := block.ModuleBlock()
+
+	for {
+		path = append([]string{mod.FullName()}, path...)
+		break
+	}
+	return nil
+}
+
+func loadResourcesToContext(ctx *tfcontext.Context, resources []*tfjson.StateResource) error {
+	for _, resource := range resources {
+		if resource.Mode != "data" {
+			continue
+		}
+
+		if strings.HasPrefix(resource.Type, "coder_") {
+			// Ignore coder blocks
+			continue
+		}
+
+		val, err := toCtyValue(resource.AttributeValues)
+		if err != nil {
+			return fmt.Errorf("unable to determine value of resource %q: %w", resource.Address, err)
+		}
+
+		ctx.Set(val, string(resource.Mode), resource.Type, resource.Name)
+	}
+	return nil
+}
+
 func toCtyValue(a any) (cty.Value, error) {
 	if a == nil {
 		return cty.NilVal, nil

preview_test.go

@@ -173,6 +173,17 @@ func Test_Extract(t *testing.T) {
 			expUnknowns: []string{},
 			params:      map[string]func(t *testing.T, parameter types.Parameter){},
 		},
+		{
+			name:    "many modules",
+			dir:     "manymodules",
+			expTags: map[string]string{},
+			input: preview.Input{
+				ParameterValues: map[string]types.ParameterValue{},
+				PlanJSONPath:    "before.json",
+			},
+			expUnknowns: []string{},
+			params:      map[string]func(t *testing.T, parameter types.Parameter){},
+		},
 	} {
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()

testdata/manymodules/one/onea/onea.tf

@@ -0,0 +1,45 @@
+terraform {
+  required_providers {
+    coder = {
+      source  = "coder/coder"
+    }
+  }
+}
+
+locals {
+  foo = "one-a"
+}
+
+data "coder_parameter" "one-a-question" {
+  name        = "One A Question"
+  description = "From module 1, sub A"
+  type        = "string"
+  default     = local.foo
+
+  option {
+    name  = "Default"
+    value = local.foo
+  }
+
+  option {
+    name  = "Terraform"
+    value = jsondecode(data.http.packer.response_body).current_version
+  }
+}
+
+output "export" {
+  value = local.foo
+}
+
+output "packer" {
+  value = jsondecode(data.http.packer.response_body).current_version
+}
+
+data "http" "packer" {
+  url = "https://checkpoint-api.hashicorp.com/v1/check/packer"
+
+  # Optional request headers
+  request_headers = {
+    Accept = "application/json"
+  }
+}