stacklet/Sinistral IaC Scanner
Scan Infrastructure as Code with Sinistral policies
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| iac_directories | Path(s) from the root of your repo to your IaC folder(s). Supports multiple directories separated by newlines. | yes | — |
| recurse | Recursively scan all subdirectories containing Terraform files | no | false |
| sinistral_api_url | Base URL of your Sinistral API (e.g. https://api.sinistral.example.com) | yes | — |
| sinistral_auth_url | Auth URL for your Sinistral instance (e.g. https://auth.console.example.com) | yes | — |
| sinistral_project_client_id | OAuth2 client ID for your Sinistral project | yes | — |
| sinistral_project_client_secret | OAuth2 client secret for your Sinistral project | yes | — |
| sinistral_project | Sinistral project name to scan against | yes | — |
| sinistral_cli_version | sinistral-cli version to use. Accepts any git ref (branch, tag, SHA) from https://github.com/stacklet/sinistral-cli. | no | 8552c68f72b9df5bb4985f722fec4063ebb35218 |
| post_pr_comment | Whether to post scan results as a PR comment. | no | true |
| skip_unchanged | Skip the scan (and toolchain setup) when the triggering push/PR changed no Terraform files (.tf/.tf.json/.tfvars/.tfvars.json) under `iac_directories`. Fails open: if the changed files can't be determined, the scan runs. Set to 'false' to always scan. | no | true |
Outputs
no outputs