0xsj/Preflight Security Check
Analyze infrastructure-as-code changes for security impact before deployment
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Mar 20, 2026
- License
- None
Pinned Snippet
uses: 0xsj/preflight@90fa6530638922cbbf196e95430ccca3fd180760 # no releases — HEAD as of 2026-07-17tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| plan-file | Path to the Terraform plan JSON or CloudFormation changeset file | yes | — |
| fail-on | Fail if any finding at or above this severity (critical/high/medium/low) | no | "" |
| threshold | Risk score threshold (0-100). Exit 1 if exceeded | no | 60 |
| baseline | Path to a baseline file to suppress known findings | no | "" |
| format | Output format (console/json/sarif/markdown/html/junit) | no | sarif |
| upload-sarif | Upload SARIF results to GitHub Code Scanning | no | true |
| comment | Post a PR comment with findings summary | no | true |
| python-version | Python version to use | no | 3.11 |
Outputs
| name | description |
|---|---|
| score | Risk score (0-100) |
| category | Risk category (safe/low/moderate/high/critical) |
| findings | Total number of findings |
| passed | Whether the check passed (true/false) |