aleksei-aikashev/wizcli-wrapper
A simple wrapper for wiz-cli
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| iac_scan_path | Set the relative path in the repo to the root folder of the IaC files. Wiz scan is recursive and scans all subfolders. To increase the quality of the scan of terraform scan you can point it to the plan.tfplanjson file: terraform plan -out plan.tfplan && terraform show -json plan.tfplan > plan.tfplanjson | no | . |
| wiz_iac_policy | Set the desired Wiz-cli IaC policy to use. You can add more policies to use by separating them with comma ','. | no | Default IaC policy |
| wiz_iac_report_name | Create a Wiz report with the specified name. The report can be viewed in the Wiz console under Reports -> CI/CD Scans. | no | ${{ github.repository }}-${{ github.run_number }} |
| wiz_iac_tags | Set the desired tags to use | no | repo=${{ github.repository }},commit_sha=${{ github.sha }},pr_title=${{ github.event.pull_request.title }},pr_number=${{ github.event.number}},event_name=${{ github.event_name }},github_workflow=${{ github.workflow }} |
| skip_iac_scan | Set to 'skip' to skip the IaC scan | no | — |
| docker_scan_path | Set the relative path in the repo to the folder with Dockerfile. We need this step as wizcli build a docker image locally using your Dockerfile. Important! It supports only one Dockerfile per action. | no | . |
| wiz_docker_vulnerabilities_policy | Set the desired Wiz-cli vulnerabilities policy to use. You can add more policies to use by separating them with comma ','. | no | Default vulnerabilities policy |
| wiz_docker_report_name | Create a Wiz report with the specified name. The report can be viewed in the Wiz console under Reports -> CI/CD Scans. Since the name of the report is used as the name of the docker image, please make sure that you use only allowed lowercase characters. | no | ${{ github.repository }}-${{ github.run_number }} |
| skip_docker_scan | Set to 'skip' to skip the docker scan | no | — |
| wiz_client_id | Set Wiz service account id | yes | — |
| wiz_client_secret | Set Wiz service account secret | yes | — |
Outputs
no outputs