| tfe-token | The Terraform cloud/enterprise token | yes | — |
| tfe-org | The Terraform cloud/enterprise organization | yes | — |
| not-before | Duration that will filter the workspaces that executed a drift detection plan before before this duration (e.g: 1h, 15m, 72h). | — | — |
| limit-max-plans | The maximum drift detection plans that will be executed. | — | — |
| dry-run | Execute in dry-run mode. | — | false |
| no-error | If enabled will not return an error on drift or drift detection failed plans. | — | false |
| debug | Enables debug mode. | — | false |
| include-names | String of comma separated regexes, that will exclude the workspaces that don't match these (e.g: dns,kubernetes-*,production-*). | — | — |
| exclude-names | String of comma separated regexes, that will exclude the workspaces that match these (e.g: dns,kubernetes-*,production-*). | — | — |
| include-tags | String of comma separated tags, that will exclude the workspaces that don't match these tags (e.g: production,infrastructure). | — | — |
| exclude-tags | String of comma separated tags, that will exclude the workspaces that match these (e.g: production,infrastructure). | — | — |