ppiankov/IAMSpectre Audit
Audit AWS and GCP IAM for stale credentials, overprivileged roles, and policy drift
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| cloud | Which cloud to audit: aws or gcp | yes | — |
| project | GCP project ID (required when cloud=gcp, ignored for aws) | no | "" |
| profile | AWS profile name (only for cloud=aws) | no | "" |
| stale-days | Inactivity threshold in days | no | 90 |
| severity-min | Minimum severity: critical, high, medium, low | no | low |
| format | Output format: text, json, sarif, spectrehub | no | text |
| timeout | Scan timeout | no | 5m |
| version | IAMSpectre version to use (e.g., 0.1.0). Defaults to latest. | no | latest |
| args | Additional arguments to pass to iamspectre | no | "" |
| upload-sarif | Upload SARIF results to GitHub Security tab (requires format=sarif) | no | false |
Outputs
| name | description |
|---|---|
| exit-code | Exit code from iamspectre |
| report-path | Path to the generated report file |