actions-marketplace-validations/Run tfsec with reviewdog
🐶 Run tfsec with reviewdog on pull requests to enforce security best practices
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Maintainedlast commit Sep 4, 2025
- License
- MIT
Pinned Snippet
uses: actions-marketplace-validations/reviewdog_action-tfsec@a2f2edbf61c6bb22849de705d304b9d2af5f69cd # no releases — HEAD as of 2026-07-10tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| github_token | GITHUB_TOKEN | yes | ${{ github.token }} |
| working_directory | Directory to run the action on, from the repo root. Default is . ( root of the repository) | no | . |
| level | Report level for reviewdog [info,warning,error] | no | error |
| tool_name | The name for the report as it will show up in GitHub's interface. Default is tfsec. | no | tfsec |
| reporter | Reporter of reviewdog command [github-pr-check,github-pr-review]. Default is github-pr-check. | no | github-pr-check |
| filter_mode | Filtering for the reviewdog command [added,diff_context,file,nofilter]. Default is added. | no | added |
| fail_on_error | Exit code for reviewdog when errors are found [true,false] Default is `false`. | no | false |
| flags | Additional reviewdog flags | no | "" |
| tfsec_version | The version of tfsec to install. Default is latest. | no | latest |
| tfsec_flags | List of arguments to send to tfsec For the output to be parsable by reviewdog --format=checkstyle is enforced Default is blank. | no | "" |
Outputs
| name | description |
|---|---|
| tfsec-return-code | tfsec command return code |
| reviewdog-return-code | reviewdog command return code |