happypathway/Terraform Plan Analyzer
Analyze Terraform plans for security and safety risks using Google's Gemini API
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| plan_path | Path to the Terraform plan JSON file to analyze (not required if using Terraform Cloud/Enterprise) | no | — |
| gemini_api_key | Google Gemini API key for AI analysis | yes | — |
| github_token | GitHub token for creating PR comments with analysis results | yes | — |
| issue_severity_threshold | Minimum severity level to flag as an issue (low, medium, high, critical) | no | medium |
| fail_on_severity | The workflow will fail if issues at or above this severity are found (low, medium, high, critical) | no | high |
| include_plan_summary | Include a simplified plan summary in the markdown PR comment | no | true |
| tfc_enabled | Enable pulling plan from Terraform Cloud/Enterprise | no | false |
| tfc_token | API token for Terraform Cloud/Enterprise | no | — |
| tfc_host | Hostname for Terraform Cloud/Enterprise instance | no | app.terraform.io |
| tfc_organization | Organization name in Terraform Cloud/Enterprise | no | — |
| tfc_workspace | Workspace name in Terraform Cloud/Enterprise | no | — |
| tfc_run_id | Specific run ID to pull plan from (if not specified, will use latest run) | no | — |
Outputs
| name | description |
|---|---|
| has_issues | True if security issues were found above the threshold |
| issue_count | Number of security issues found |
| highest_severity | Highest severity level found (low, medium, high, critical) |