constellation/.github/workflows/test-tfsec.yml
renovate[bot] a8101c8c64
deps: update GitHub action dependencies (#1745)
Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-05-05 14:42:20 +02:00

41 lines
1010 B
YAML

name: Terraform security scanner
on:
workflow_dispatch:
push:
branches:
- main
- "release/**"
paths:
- "**.tf"
- ".github/workflows/test-tfsec.yml"
pull_request:
paths:
- "**.tf"
- ".github/workflows/test-tfsec.yml"
jobs:
tfsec:
name: tfsec
runs-on: ubuntu-22.04
permissions:
contents: read
pull-requests: write
steps:
- name: Checkout
uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
with:
ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
- name: tfsec
uses: aquasecurity/tfsec-pr-commenter-action@5b483d46fb4fd0cbe2259cf68354a3fb23aa70fe
with:
soft_fail_commenter: true
tfsec_formats: default,text
tfsec_args: --force-all-dirs
github_token: ${{ github.token }}
- name: tfsec summary
shell: bash
run: tail -n 27 results.text >> "$GITHUB_STEP_SUMMARY"