[WIP] - [NA-000] - TFSEC workflow integration (No comments + Visual Checks + Security Tab)

.github/workflows/tfsec-sarif.yaml

@@ -0,0 +1,21 @@
+name: tfsec-sarif
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+jobs:
+  tfsec-sarif:
+    name: tfsec sarif report
+    runs-on: ubuntu-latest
+    steps:
+    - name: Clone repo
+      uses: actions/checkout@master
+    - name: tfsec
+      uses: aquasecurity/[email protected]
+      with:
+        sarif_file: tfsec.sarif         
+    - name: Upload SARIF file
+      uses: github/codeql-action/upload-sarif@v1
+      with:
+        sarif_file: tfsec.sarif      

.github/workflows/tfsec.yml

@@ -0,0 +1,17 @@
+name: tfsec
+on:
+  push:
+    branches:
+    - main
+  pull_request:
+jobs:
+  tfsec:
+    name: tfsec
+    runs-on: ubuntu-latest
+    steps:
+    - name: Clone repo
+      uses: actions/checkout@master
+    - name: tfsec
+      uses: aquasecurity/[email protected]
+      with:
+        soft_fail: true

terraform/indexing-subsystem/main.tf

@@ -104,6 +104,10 @@ resource "aws_ecr_repository" "ecr-repo-indexer-lambda" {
   name = "indexer-lambda"
 }
 
+resource "aws_ecr_repository" "test-trigger-tfsec-comment" {
+  name = "test-trigger-tfsec-comment"
+}
+
 resource "aws_sqs_queue" "indexer_topic" {
   name                       = "indexer-topic"
   message_retention_seconds  = 86400 # 1 day