tfsec action for Terrafrom security best practices

Adding https://github.com/reviewdog/action-tfsec to run https://github.com/liamg/tfsec with reviewdog output on the PR
This commit is contained in:
Vlad Ionescu 2020-01-17 11:34:11 +02:00 committed by GitHub
parent 97cd2eef8e
commit ec2e4e5bfd
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -222,6 +222,7 @@ Set up your GitHub Actions workflow with a specific version of your programming
- [Lint a Dockerfile using Hadolint](https://github.com/cds-snc/github-actions/tree/master/docker-lint)
- [Lint terraform files using tflint](https://github.com/cds-snc/github-actions/tree/master/tf-lint)
- [Lint terraform files using tflint, with reviewdog output on the PR](https://github.com/reviewdog/action-tflint)
- [Run tfsec, with reviewdog output on the PR](https://github.com/reviewdog/action-tfsec)
- [Validate Puppet modules using Puppet PDK](https://github.com/mpepping/github-actions/tree/master/pdk-validate)
- [Scan git commits for secrets with gitleaks](https://github.com/eshork/gitleaks-action)
- [Scan code with SonarCloud](https://github.com/sonarsource/sonarcloud-github-action)