turbot/Powerpipe Check

Run Powerpipe mod benchmarks and controls. Create annotations for Infrastructure as Code (IaC) controls.

Trust Signals

name	description	required	default
mod-url	Mod URL to clone. Examples: https://github.com/turbot/steampipe-mod-aws-compliance	yes	—
mod-branch	Mod branch or tag to clone. Defaults to 'main'. Examples: main, release/v0.7, v0.5, 'v1.0-beta.0	no	main
controls	Space separated list of controls to run. Can also pass in as a multi-line string.	no	—
benchmarks	Space separated list of benchmarks to run. Can also pass in as a multi-line string.	no	—
database	Database connection string to use for running controls and benchmarks.	no	—
pipes-snapshot-visibility	Set this to 'anyone_with_link' or 'workspace' to create a snapshot in Turbot Pipes with the specified visibility.	no	—
pipes-token	The Turbot Pipes token used to save snapshots. Can also be set via the PIPES_TOKEN environment variable (https://powerpipe.io/docs/reference/env-vars/pipes_token).	no	—
additional-args	Space separated args to add to the 'powerpipe control/benchmark run' command.	no	—
artifact-exports	Comma separated export types to save as artifacts. Example: 'csv,json'. For all valid formats please see https://powerpipe.io/docs/reference/cli/control#output-formats.	no	—
github-token	GitHub token used to download the Powerpipe mod, upload artifacts, and create annotations.	no	${{ github.token }}

no outputs