Merge pull request #302 from Vlaaaaaaad/patch-1

tfsec action for Terrafrom security best practices
This commit is contained in:
Gary Ewan Park 2020-01-19 20:18:05 +00:00 committed by GitHub
commit 782908d4cb
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -222,6 +222,7 @@ Set up your GitHub Actions workflow with a specific version of your programming
- [Lint a Dockerfile using Hadolint](https://github.com/cds-snc/github-actions/tree/master/docker-lint) - [Lint a Dockerfile using Hadolint](https://github.com/cds-snc/github-actions/tree/master/docker-lint)
- [Lint terraform files using tflint](https://github.com/cds-snc/github-actions/tree/master/tf-lint) - [Lint terraform files using tflint](https://github.com/cds-snc/github-actions/tree/master/tf-lint)
- [Lint terraform files using tflint, with reviewdog output on the PR](https://github.com/reviewdog/action-tflint) - [Lint terraform files using tflint, with reviewdog output on the PR](https://github.com/reviewdog/action-tflint)
- [Run tfsec, with reviewdog output on the PR](https://github.com/reviewdog/action-tfsec)
- [Validate Puppet modules using Puppet PDK](https://github.com/mpepping/github-actions/tree/master/pdk-validate) - [Validate Puppet modules using Puppet PDK](https://github.com/mpepping/github-actions/tree/master/pdk-validate)
- [Scan git commits for secrets with gitleaks](https://github.com/eshork/gitleaks-action) - [Scan git commits for secrets with gitleaks](https://github.com/eshork/gitleaks-action)
- [Scan code with SonarCloud](https://github.com/sonarsource/sonarcloud-github-action) - [Scan code with SonarCloud](https://github.com/sonarsource/sonarcloud-github-action)