pa2588-devsecops-iac-security/.github/workflows/tfsec.yml at main · bth-dipt-teaching/pa2588-devsecops-iac-security · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
name: Tfsec

on:
  workflow_run:
    workflows: ["Terraform"]
    types:
      - completed

jobs:
  tfsec-job:
    runs-on: ubuntu-latest
    name: Tfsec
    permissions:
      contents: read
      security-events: write
    steps:
      - name: Checkout repo
        uses: actions/checkout@v3

      - name: Mkdir tfsec
        run: mkdir tfsecres

      ############## Version 1 ##############
      #- name: Run Tfsec
      #  uses: aquasecurity/tfsec-action@v1.0.0
      #  with:
      #    working_directory: 'iac'
      #    soft_fail: true
      #    format: sarif
      #    additional_args: --out tfsecres/results.sarif --tfvars-file iac/terraform.tfvars
      #
      #- name: Output tfsec findings
      #  run: cat tfsecres/results.sarif
      #
      #- name: Upload Tfsec findings
      #  uses: github/codeql-action/upload-sarif@v2
      #  with:
      #    sarif_file: tfsecres/results.sarif
      ########################################