diff --git a/scripts/local-init.sh b/scripts/local-init.sh
new file mode 100755
index 0000000..3793afa
--- /dev/null
+++ b/scripts/local-init.sh
@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+
+# when a command fails, bash exits instead of continuing with the rest of the script
+set -o errexit
+# make the script fail, when accessing an unset variable
+set -o nounset
+# pipeline command is treated as failed, even if one command in the pipeline fails
+set -o pipefail
+# enable debug mode, by running your script as TRACE=1
+if [[ "${TRACE-0}" == "1" ]]; then set -o xtrace; fi
+
+source "$(dirname "$0")/common.sh"
+
+# we assume gcloud to be downloaded and initialized
+# gcloud init
+# gcloud auth application-default login
+
+if bucket_exists "$SEED_PROJECT"; then
+    tf init -backend-config="bucket=$SEED_PROJECT"
+else
+    echo "Missing bucket '$SEED_PROJECT'; cannot initialize backend"
+    exit 1 
+fi
diff --git a/scripts/plan.sh b/scripts/plan.sh
new file mode 100755
index 0000000..9528211
--- /dev/null
+++ b/scripts/plan.sh
@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+# shellcheck disable=SC1091
+# when a command fails, bash exits instead of continuing with the rest of the script
+set -o errexit
+# make the script fail, when accessing an unset variable
+set -o nounset
+# pipeline command is treated as failed, even if one command in the pipeline fails
+set -o pipefail
+# enable debug mode, by running your script as TRACE=1
+if [[ "${TRACE-0}" == "1" ]]; then set -o xtrace; fi
+
+source "$(dirname "$0")/common.sh"
+
+terraform plan \
+    -var "billing_account_id=$BILLING_ACCOUNT" \
+    -var "seed_sa_email=$SA_EMAIL" \
+    -var "github_admin_token=$GITHUB_ADMIN_TOKEN" \
+    -var "github_api_label_token=$GITHUB_API_LABEL_TOKEN" \
+    -var "project_postfix=$POSTFIX" \
+    -var "workload_identity_provider_name=$PROVIDER_ID" \
+    -var "workload_identity_pool_id=$WORKLOAD_IDENTITY_POOL" \
+    -var "codacy_api_token=$CODACY_API_TOKEN" \
+    -var "docker_registry_username=$DOCKER_REGISTRY_USERNAME" \
+    -var "docker_registry_token=$DOCKER_REGISTRY_TOKEN"