reviewdog/Run tfsec with reviewdog

🐶 Run tfsec with reviewdog on pull requests to enforce security best practices

Trust Signals

Scorecard Score: Scorecard 4–6scored Jul 6, 2026
Maintenance Recency: Activelast commit Jul 8, 2026
License: MIT

Pinned Snippet

workflow.ymlSHA-pinned

uses: reviewdog/action-tfsec@a2f2edbf61c6bb22849de705d304b9d2af5f69cd # v1.30.0

tags can be moved; commit SHAs can't. why a SHA?

Inputs

name	description	required	default
github_token	GITHUB_TOKEN	yes	${{ github.token }}
working_directory	Directory to run the action on, from the repo root. Default is . ( root of the repository)	no	.
level	Report level for reviewdog [info,warning,error]	no	error
tool_name	The name for the report as it will show up in GitHub's interface. Default is tfsec.	no	tfsec
reporter	Reporter of reviewdog command [github-pr-check,github-pr-review]. Default is github-pr-check.	no	github-pr-check
filter_mode	Filtering for the reviewdog command [added,diff_context,file,nofilter]. Default is added.	no	added
fail_on_error	Exit code for reviewdog when errors are found [true,false] Default is `false`.	no	false
flags	Additional reviewdog flags	no	""
tfsec_version	The version of tfsec to install. Default is latest.	no	latest
tfsec_flags	List of arguments to send to tfsec For the output to be parsable by reviewdog --format=checkstyle is enforced Default is blank.	no	""

Outputs

name	description
tfsec-return-code	tfsec command return code
reviewdog-return-code	reviewdog command return code