gebalamariusz/cloud-audit - AWS Security Scanner
Scan your AWS account for security misconfigurations with attack chain detection, Terraform remediation, and SARIF output
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 2, 2026
- License
- MIT
Pinned Snippet
uses: gebalamariusz/cloud-audit@c6e5e21ed4555eab808a69cc2849a0f78e262c00 # v2.4.0tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| cloud-audit-version | Pin cloud-audit to a specific PyPI version (e.g. 2.3.0). Default matches the action's release tag for reproducible builds. | no | 2.3.0 |
| format | Output format: sarif, json, html, markdown | no | sarif |
| output | Output file path | no | results.sarif |
| regions | Comma-separated AWS regions to scan (empty = default region) | no | "" |
| remediation | Show remediation details in console output | no | false |
| fail-on-findings | Fail the workflow if security findings are detected | no | true |
| diff-baseline | Path to a baseline scan JSON file for diff comparison | no | "" |
| extra-args | Additional arguments passed to cloud-audit scan | no | "" |
Outputs
no outputs