actions-marketplace-validations/Terraform + Checkov CI
Runs checkov on terraform plan and pretty prints results to comment
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| terraform_version | Terraform version, defaults to install latest | no | "" |
| terraform_host | The hostname of a Terraform Cloud/Enterprise instance to place within the credentials block of the Terraform CLI configuration file. Defaults to `app.terraform.io`. | no | "" |
| terraform_token | The API token for a Terraform Cloud/Enterprise instance to place within the credentials block of the Terraform CLI configuration file. | no | "" |
| terraform_init | Terraform init option. Run with 'migrate' for `-migrate-state` or 'reconfigure' for `reconfigure`. All other options will result in regular `terraform init`. | no | "" |
| terraform_replace_resources | Comma separated list of resource addresses to run `terraform apply -replace=<item1>` | no | "" |
| terraform_import_resource | Comma separated list of resource addresses to run `terraform import <addr> <id>` | — | "" |
| working_directory | Github actions can't inherit working-directory. Set it here. | no | "" |
| mode | Plan or Apply mode. If plan, will update github job summary with results. If apply, will run on a tag and auto generate a release with results as the notes. | no | "" |
| create_release | For applies, create a release with tag or sha (if configured for branch) | no | "" |
| github_token | For applies, needed to update the releases after tagging | no | "" |
| config | Experimental - Github actions only supports string inputs, but if you format a yaml string, this action will parse it. This config will take precedence. ```yaml with: config: | mode: plan workingDirectory: "." createRelease: false terraform: version: latest host: app.terraform.io token: "Please use env var" initMode: upgrade github: token: "Please use env var" resources: import: - address: module.test["resource"] id: "abcd123a" replace: - "" ``` | no | "" |
Outputs
no outputs