moisestapia/TMAC – Threat Modeling as Code

Run a CI-native STRIDE delta scan against changed Terraform files, publish a PR comment with the findings summary, and upload the report artifact.

Trust Signals

name	description	required	default
dir	Directory to scan (relative to the workspace root). Accepts any path string relative to $GITHUB_WORKSPACE.	no	.
fail-on	Severity threshold for a non-zero exit code. Accepted values: critical, high, medium, low.	no	high
delta-only	Restrict analysis to the .tf files changed in this pull request. Accepted values: true, false.	no	true
comment	Publish a PR comment with the findings summary. Accepted values: true, false.	no	true
report-format	Output format for the generated report artifact. Accepted values: Markdown, html, json.	no	Markdown
output	Output file path for the report (relative to the workspace root). Defaults to the standard workspace output location when omitted.	no	""

no outputs