obsidianwall/ObsidianWall Verdict
Pre-deployment infrastructure governance for Terraform and CloudFormation. Deterministic policy evaluation before deployment executes.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 10, 2026
- License
- Apache 2.0
Pinned Snippet
uses: obsidianwall/obsidianwall-verdict@2726cc9aabcc7332059b6bf5aad9d8c9f2ed238a # v0.5.2tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| plan | Path to the Terraform plan JSON file or CloudFormation template (JSON or YAML). Format is auto-detected. Terraform: terraform show -json tfplan > plan.json CloudFormation: pass the template file directly. | yes | — |
| policy | Path to the ObsidianWall policy YAML file. Relative to the workspace root. | yes | — |
| role | Role of the user or service account triggering the deployment. Used for override authority routing. Examples: engineer, budget_owner, platform_lead | no | engineer |
| fail_on_deny | Fail the workflow step if the governance decision is DENY or DENY_WITH_OVERRIDE. Set to 'false' to inspect the decision output without blocking the pipeline. | no | true |
| python_version | Python version to use for the evaluation. Minimum supported: 3.11 | no | 3.11 |
Outputs
| name | description |
|---|---|
| decision | Governance decision outcome. ALLOW | ALLOW_WITH_NOTIFICATION | ALLOW_WITH_APPROVAL_REQUIRED | DENY_WITH_OVERRIDE | DENY |
| conditions_passed | Whether all policy conditions were satisfied. |
| risk_score | Overall infrastructure risk score (0–100). Aggregated across all analyzers. |
| effective_severity | Effective governance severity after risk escalation. informational | low | medium | high | critical |
| decision_id | Unique identifier for this governance decision. Use for audit trail correlation. |