action.yml

name: "Run tfsecurity with sarif upload"
description: "Run tfsecurity against terraform code base and upload the sarif output to the github repo"
author: "Owen Rumney"

inputs:
  working_directory:
    description: |
      Directory to run the action on, from the repo root.
      Default is . ( root of the repository)
    default: "."
    required: false
  sarif_file:
    description: The path to write the sarif report, defaults to tfsecurity.sarif
    default: tfsecurity.sarif
    required: false
  tfvars_file:
    description: The tfvars file to use for the scan
    required: false
  tfsecurity_version:
    description: The version of tfsecurity to use for the scan, defaults to latest
    default: latest
    required: false
  config_file:
    description: The path to the config file. (eg. ./tfsecurity.yml)
    required: false
  tfsecurity_args:
    description: |
      Space seperated args specified here will be added during tfsecurity execution.
      (eg. --verbose)
    required: false
  full_repo_scan:
    description: Scan the entire repository for Terraform issues
    required: false

outputs:
  tfsecurity-return-code:
    description: "tfsecurity command return code"
runs:
  using: "docker"
  image: "Dockerfile"
branding:
  icon: "search"
  color: "gray-dark"