matijazezelj/AIB Infra Scan

Scan IaC files with AIB and publish infrastructure graph/security reports.

Trust Signals

Scorecard Score: not yet scored
Maintenance Recency: Activelast commit Jun 10, 2026
License: Apache 2.0

Pinned Snippet

workflow.ymlSHA-pinned

uses: matijazezelj/aib@f1f6e86559576f819aceee3cd5a051528de42359 # v1.4.5

tags can be moved; commit SHAs can't. why a SHA?

Inputs

name	description	required	default
paths	Newline or comma separated paths to scan.	no	.
sources	Source scanner(s): auto, terraform, terraform-plan, kubernetes, compose, cloudformation, pulumi, ansible. Comma separated.	no	auto
aib-version	AIB release tag to download, or 'source' to build from this action checkout.	no	source
comment-pr	Create or update a PR comment with the Markdown report.	no	true
fail-on	Fail when findings exist at or above severity: none, critical, warning, info.	no	critical
upload-artifacts	Upload aib.db, aib-report.md, and aib-report.json as a workflow artifact.	no	true
artifact-name	Name for uploaded artifact.	no	aib-report
output-dir	Directory for generated reports.	no	.aib
baseline-report	Optional previous AIB JSON report path to diff against.	no	""

Outputs

name	description
findings-count	Total security findings.
critical-count	Critical findings count.
warning-count	Warning findings count.
info-count	Info findings count.
nodes-count	Graph node count.
edges-count	Graph edge count.
markdown-report-path	Path to the Markdown report.
json-report-path	Path to the JSON report.
added-assets-count	Assets added compared with baseline-report.
removed-assets-count	Assets removed compared with baseline-report.
changed-assets-count	Assets changed compared with baseline-report.
added-findings-count	Findings added compared with baseline-report.
resolved-findings-count	Findings resolved compared with baseline-report.