efterlev/Efterlev compliance scan
Run the Efterlev FedRAMP 20x compliance scanner against your Terraform and post findings as a sticky PR comment.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| target-dir | Directory to scan, relative to the workspace. | no | . |
| baseline | FRMR baseline name (fedramp-20x-moderate is the v1 default). | no | fedramp-20x-moderate |
| efterlev-version | Efterlev version to install. "latest" pulls the newest stable PyPI release. | no | latest |
| run-gap-agent | Run the Gap Agent after scanning. Requires ANTHROPIC_API_KEY in env. | no | false |
| fail-on-finding | Exit non-zero if any scan finding is detected. | no | false |
| comment-on-pr | Post or update a sticky PR comment with scan results. Only applies to pull_request events. | no | true |
| install-method | How to install Efterlev: "pipx" or "container". | no | pipx |
Outputs
| name | description |
|---|---|
| findings-count | Total number of detector findings produced by the scan. |
| report-path | Filesystem path to the HTML report produced by the scan. |
| store-dir | Filesystem path to the .efterlev/ provenance store. |
| has-regressions | Whether drift/regressions were detected. Always false at v1.0.0; reserved for the future Drift Agent integration. |