From ec2e4e5bfd26fd6ce666854d11e58f385a41acd3 Mon Sep 17 00:00:00 2001 From: Vlad Ionescu Date: Fri, 17 Jan 2020 11:34:11 +0200 Subject: [PATCH] tfsec action for Terrafrom security best practices Adding https://github.com/reviewdog/action-tfsec to run https://github.com/liamg/tfsec with reviewdog output on the PR --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 40c5666..06d4765 100644 --- a/README.md +++ b/README.md @@ -222,6 +222,7 @@ Set up your GitHub Actions workflow with a specific version of your programming - [Lint a Dockerfile using Hadolint](https://github.com/cds-snc/github-actions/tree/master/docker-lint) - [Lint terraform files using tflint](https://github.com/cds-snc/github-actions/tree/master/tf-lint) - [Lint terraform files using tflint, with reviewdog output on the PR](https://github.com/reviewdog/action-tflint) +- [Run tfsec, with reviewdog output on the PR](https://github.com/reviewdog/action-tfsec) - [Validate Puppet modules using Puppet PDK](https://github.com/mpepping/github-actions/tree/master/pdk-validate) - [Scan git commits for secrets with gitleaks](https://github.com/eshork/gitleaks-action) - [Scan code with SonarCloud](https://github.com/sonarsource/sonarcloud-github-action)