| ee | use ee cli? | no | false |
| setup-aws | Setup AWS | no | false |
| aws-access-key-id | AWS access key id | no | — |
| aws-secret-access-key | AWS secret access key | no | — |
| aws-role-to-assume | ARN of AWS IAM role to assume using OIDC | no | — |
| aws-region | AWS region | no | us-east-1 |
| setup-google-cloud | Setup google cloud | no | false |
| google-auth-credentials | Service account key used got Google auth (mutually exclusive with 'google-workload-identity-provider' input) | no | — |
| google-workload-identity-provider | Workload identity provider to be used for Google OIDC auth (mutually exclusive with 'google-auth-credentials' input) | no | — |
| google-workload-identity-provider-audience | 'audience' parameter configured in Google's Workload Identity Provider (if specified). To be used when the 'google-workload-identity-provider' input is specified | no | — |
| google-service-account | Service account to be used when the 'google-workload-identity-provider' input is specified) | no | — |
| google-lock-bucket | The GCP bucket to use for locks | no | — |
| setup-azure | Setup Azure | no | false |
| azure-client-id | Azure Client ID to be used for Azure OIDC auth | no | — |
| azure-tenant-id | AzureAD ID of the organization you are using | no | — |
| azure-subscription-id | Subscription ID of you are using | no | — |
| setup-terragrunt | Setup terragrunt | no | false |
| setup-opentofu | Setup OpenToFu | no | false |
| terragrunt-version | Terragrunt version | no | v0.55.5 |
| opentofu-version | OpenTofu version | no | v1.6.1 |
| setup-terraform | Setup terraform | no | false |
| terraform-version | Terraform version | no | v1.5.5 |
| configure-checkout | Configure checkout. Beware that this will overwrite any changes in the working directory | no | true |
| upload-plan-destination | Destination to upload the plan to. gcp, github and aws are currently supported. | no | — |
| upload-plan-destination-s3-bucket | Name of the destination bucket for AWS S3. Should be provided if destination == aws | no | — |
| upload-plan-destination-gcp-bucket | Name of the destination bucket for a GCP bucket. Should be provided if destination == gcp | no | — |
| setup-checkov | Setup Checkov | no | false |
| checkov-version | Checkov version | no | 3.2.22 |
| disable-locking | Disable locking (deprecated, use pr_locks on mantis.yml instead) | no | false |
| digger-filename | Alternative Digger configuration file name | no | — |
| digger-token | Digger token | no | — |
| digger-hostname | Digger hostname | no | https://cloud.digger.dev |
| digger-organisation | The name of your mantis organisation | no | — |
| setup-tfenv | Setup tfenv | no | false |
| post-plans-as-one-comment | Post plans as one comment | no | false |
| reporting-strategy | comments_per_run or latest_run_comment, anything else will default to original behavior of multiple comments | no | comments_per_run |
| mode | manual, drift-detection or otherwise | no | "" |
| no-backend | run cli-only, without an orchestrator backend | no | false |
| command | mantis plan or mantis apply in case of manual mode | no | "" |
| project | project name for mantis to run in case of manual mode | no | "" |
| drift-detection-slack-notification-url | drift-detection slack drift url | no | "" |
| cache-dependencies | Leverage actions/cache to cache dependencies to speed up execution | no | false |