tenable/Terrascan IaC scanner
Uses Terrascan to detect security violations on Terraform/CloudFormation/k8s/Helm/Kustomize files
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| iac_dir | path to a directory containing one or more IaC files (default ".") | no | . |
| iac_type | IaC type (helm, k8s, kustomize, terraform) | yes | — |
| iac_version | IaC version (helm: v3, k8s: v1, kustomize: v3, terraform: v12, v14) | no | — |
| non_recursive | do not scan directories and modules recursively | no | — |
| policy_path | policy path directory for custom policies | no | — |
| policy_type | policy type (all, aws, azure, gcp, github, k8s) (default all) | no | — |
| skip_rules | one or more rules to skip while scanning (example: "ruleID1,ruleID2") | no | — |
| config_path | config file path | no | — |
| only_warn | the action will only warn and not error when violations are found | no | — |
| sarif_upload | if true a sarif file named terrascan.sarif will be generated with the results of the scan | no | — |
| verbose | will show violations with additional details (applicable for default output) | no | — |
| find_vulnerabilities | will display vulnerabilities for Docker images present in the IaC files being scanned | no | — |
| scm_token | will use given access token when authenticating to provided SCM to scan IaC templates/modules | no | — |
| webhook_url | the URL where scanned report and normalized config json will be sent | no | — |
| webhook_token | the auth token to call the notification webhook URL | no | — |
Outputs
no outputs