cds-snc/Terraform Plan

Terraform init, validate, format check and plan

Trust Signals

workflow.ymlSHA-pinned

uses: cds-snc/terraform-plan@529b272050a8f718d14c59e62b59c124eead7efc # v5.0.4

tags can be moved; commit SHAs can't. why a SHA?

name	description	required	default
allow-failure	Allow the action to fail	no	false
comment	Add comment with changes to the PR	no	true
comment-delete	Delete previous comments made by the bot on the PR	no	false
comment-title	The title to give the PR comment	no	Plan changes
conftest-character-limit	Character limit for Conftest output	no	2000
conftest-checks	Location of custom conftest check definitions, e.g. `git::https://github.com/user/repository.git`, `./conftest-checks`	no	git::https://github.com/cds-snc/opa_checks.git//aws_terraform
directory	Directory with the *.tf files to validate	no	.
github-token	GitHub Token used to add comment to PR	no	false
open-tofu	Use OpenTofu instead of Terraform	no	false
plan-character-limit	Character limit for Terraform plan output	no	30000
terraform-init	Custom Terraform init args	no	""
terraform-plan	Custom Terraform plan args	no	""
terragrunt-plan	Custom Terragrunt plan args	no	""
terragrunt	Use Terragrunt instead of Terraform	no	false
secret-scan	Scan Terraform plan with trufflehog for secrets before adding comment to PR	no	false
secret-config	Path to TruffleHog config file for secret scanning	no	""
skip-conftest	Skip the conftest step	no	false
skip-fmt	Skip the terraform fmt check	no	false
skip-plan	Skip the planning step, used for repos that do not specifically have a remote backend	no	false
init-run-all	Initialize all terragrunt modules by passing the run --all command to init. Only applicable when using terragrunt	no	false
enable-drift-output	Enable generation of the drift-output structured data object	no	true

name	description
drift-output	JSON string containing structured summary data about the Terraform run and detected changes