actions-marketplace-validations/Yor GitHub Action

Run Yor against IaC templates as a pre-packaged GitHub Action.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Stalelast commit Jan 28, 2024
License
Apache 2.0
Runtime
Deprecated runtime

Pinned Snippet

workflow.ymlSHA-pinned
uses: actions-marketplace-validations/bridgecrewio_yor-action@97874abd0138bd4f62cf7fc1971530ef8dd1854e # no releases — HEAD as of 2026-07-10

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
directorydirectory with infrastructure code to scanno.
tag_groupsRun scan on all checks but a specific check identifier (comma separated)no
tagscomma delimited list of yor tags to applyno
skip_tagscomma delimited list of yor tags to not applyno
skip_dirscomma delimited list of paths for yor to skip tagging ofno
skip_resource_typescomma delimited list of resource types to skip for taggingno
custom_tagscomma delimited list of paths to external (custom) tags & tag groups pluginsno
output_formatThe format of the output. cli, jsonno
commit_changesChoose whether the action will commit changes.notrue
config_fileThe path to the config file which describes more configurations such as custom tag groupsno
versionThe yor version. Can be `latest` or a full version like `0.1.129`nolatest
skip_resourcesskip resources for taggingno
parsersIAC types to tag (default: "Terraform", "CloudFormation", "Serverless")no
tag_local_modulesAlways tag local modulesnofalse
tag_prefixAdd prefix to all the tagsno

no outputs