constellation/.github/workflows/test-tfsec.yml
renovate[bot] d76c9ac82d
deps: update GitHub action dependencies (#3086)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-13 10:42:07 +02:00

41 lines
1010 B
YAML

name: Terraform security scanner
on:
workflow_dispatch:
push:
branches:
- main
- "release/**"
paths:
- "**.tf"
- ".github/workflows/test-tfsec.yml"
pull_request:
paths:
- "**.tf"
- ".github/workflows/test-tfsec.yml"
jobs:
tfsec:
name: tfsec
runs-on: ubuntu-22.04
permissions:
contents: read
pull-requests: write
steps:
- name: Checkout
uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
with:
ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
- name: tfsec
uses: aquasecurity/tfsec-pr-commenter-action@5b483d46fb4fd0cbe2259cf68354a3fb23aa70fe
with:
soft_fail_commenter: true
tfsec_formats: default,text
tfsec_args: --force-all-dirs
github_token: ${{ github.token }}
- name: tfsec summary
shell: bash
run: tail -n 27 results.text >> "$GITHUB_STEP_SUMMARY"