opensecdevops/OSDO IaC Security Scan
Infrastructure as Code security scanning with Checkov, KICS, tfsec, Terrascan and Kubernetes validation
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit May 21, 2026
- License
- None
Pinned Snippet
uses: opensecdevops/osdo-iac-scan@28b2df4dd3d5b1d0f857cd202b5de8b13feb37c3 # v2.0.0tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| iac-directory | Directory containing IaC files | no | . |
| iac-type | Type of IaC (terraform, cloudformation, kubernetes, helm, ansible, all) | no | all |
| scanners | Scanners to use (checkov, kics, tfsec, terrascan, all) | no | all |
| compliance-frameworks | Compliance frameworks to check (cis, nist, pci-dss, hipaa) | no | cis |
| enable-kubernetes-validation | Enable Kubernetes manifest validation | no | true |
| fail-on-high | Fail on high severity findings | no | true |
| results-dir | Directory to store results | no | .osdo/results |
Outputs
| name | description |
|---|---|
| violations-found | Total violations found |
| critical-count | Critical violations count |
| high-count | High violations count |
| frameworks-passed | Compliance frameworks that passed |