validusa/Run tfsec with sarif upload
Run tfsec against terraform code base and upload the sarif output to the github repo
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| working_directory | Directory to run the action on, from the repo root. Default is . ( root of the repository) | no | . |
| sarif_file | The path to write the sarif report, defaults to tfsec.sarif | no | tfsec.sarif |
| tfvars_file | The tfvars file to use for the scan | no | — |
| tfsec_version | The version of tfsec to use for the scan, defaults to latest | no | latest |
| config_file | The path to the config file. (eg. ./tfsec.yml) | no | — |
| tfsec_args | Space seperated args specified here will be added during tfsec execution. (eg. --verbose) | no | — |
| full_repo_scan | Scan the entire repository for Terraform issues | no | — |
Outputs
| name | description |
|---|---|
| tfsec-return-code | tfsec command return code |