drifthoundhq/DriftHound Drift Detection
Run Terraform/OpenTofu/Terragrunt drift detection and report to DriftHound
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Maintainedlast commit Dec 21, 2025
- License
- MIT
Pinned Snippet
uses: drifthoundhq/drifthound-action@af03730b242c763b6a46c25a1856bce388ff9d9b # v1.0.0tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| drifthound-url | DriftHound API URL | yes | — |
| drifthound-token | DriftHound API token | yes | — |
| config-file | Path to drifthound.yaml configuration file | no | drifthound.yaml |
| scope | Specific scope name to run (optional, runs all if not specified) | no | — |
| scope-filter | Comma-separated list of scope names to run (optional, runs all if not specified) | no | — |
| environment | Filter scopes by environment field (e.g., production, staging, development) | no | — |
| fail-on-drift | Fail the workflow if drift is detected | no | false |
| cli-version | Version of drifthound-cli to install (branch, tag, or commit SHA) | no | main |
| cli-repo | Repository containing drifthound-cli | no | drifthoundhq/DriftHound |
| working-directory | Working directory to run the action from | no | . |
Outputs
| name | description |
|---|---|
| drift-detected | Whether drift was detected (true/false) |
| results | JSON summary of drift check results |
| scopes-run | Number of scopes executed |
| scopes-with-drift | Number of scopes with drift detected |