williamomeara/iam-legend
AI code review for GCP IAM gaps before terraform apply.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| terraform-plan | Path to terraform plan JSON output (optional; falls back to static HCL scan). | no | — |
| working-directory | Repo root or subdirectory to scan. | no | . |
| project-id | GCP project the deploy targets. | yes | — |
| github-token | GitHub token used to post the PR review. Default uses the workflow's GITHUB_TOKEN. | no | ${{ github.token }} |
| vertex-project | GCP project hosting the Vertex AI Gemini calls. Defaults to project-id. Required for the Gemini-written review prose path; if absent, iam-legend falls back to templated prose. | no | "" |
| vertex-location | Vertex AI region for Gemini calls. | no | us-central1 |
| vertex-model | Vertex AI Gemini model identifier (e.g. gemini-2.5-flash, gemini-2.5-pro). Note - AI Studio aliases like gemini-flash-latest do NOT work on Vertex. | no | gemini-2.5-flash |
Outputs
no outputs