Skip to content

Commit 188b5df

Browse files
committed
add a new terraform scan workflow file
1 parent 7e1676f commit 188b5df

File tree

1 file changed

+29
-0
lines changed

1 file changed

+29
-0
lines changed

.github/workflows/terrascan.yaml

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
on: [push]
2+
3+
jobs:
4+
terrascan_job:
5+
runs-on: ubuntu-latest
6+
name: terrascan-action
7+
steps:
8+
- name: Checkout repository
9+
uses: actions/checkout@v2
10+
- name: Run Terrascan
11+
id: terrascan
12+
uses: tenable/terrascan-action@main
13+
with:
14+
iac_type: 'terraform'
15+
iac_version: 'v14'
16+
policy_type: 'aws'
17+
only_warn: true
18+
sarif_upload: true
19+
#non_recursive:
20+
#iac_dir:
21+
#policy_path:
22+
#skip_rules:
23+
#config_path:
24+
#webhook_url:
25+
#webhook_token:
26+
- name: Upload SARIF file
27+
uses: github/codeql-action/upload-sarif@v1
28+
with:
29+
sarif_file: terrascan.sarif

0 commit comments

Comments
 (0)