{"id":20445872,"url":"https://github.com/rapid7/insightcloudsec-actions","last_synced_at":"2025-08-08T15:43:56.972Z","repository":{"id":41416115,"uuid":"509467656","full_name":"rapid7/insightcloudsec-actions","owner":"rapid7","description":null,"archived":false,"fork":false,"pushed_at":"2024-01-24T12:13:06.000Z","size":13,"stargazers_count":10,"open_issues_count":0,"forks_count":4,"subscribers_count":10,"default_branch":"master","last_synced_at":"2024-12-18T06:23:40.135Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/rapid7.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2022-07-01T13:35:40.000Z","updated_at":"2023-06-26T05:48:07.000Z","dependencies_parsed_at":"2023-01-11T17:22:06.133Z","dependency_job_id":"343a6bcb-5773-47b2-8c8f-d7a6dc8d12ab","html_url":"https://github.com/rapid7/insightcloudsec-actions","commit_stats":{"total_commits":4,"total_committers":3,"mean_commits":"1.3333333333333333","dds":0.5,"last_synced_commit":"1ec2988c25c98d8e3a4120fa5b131332a4dd522d"},"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rapid7%2Finsightcloudsec-actions","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rapid7%2Finsightcloudsec-actions/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rapid7%2Finsightcloudsec-actions/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rapid7%2Finsightcloudsec-actions/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/rapid7","download_url":"https://codeload.github.com/rapid7/insightcloudsec-actions/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":241997247,"owners_count":20055112,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-15T10:15:09.189Z","updated_at":"2025-08-08T15:43:56.948Z","avatar_url":"https://github.com/rapid7.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"![insightCloudSec](https://www.rapid7.com/globalassets/_logos/png/insightcloudsec-b-c.png)\n# insightCloudSec Scan\nThe [insightCloudSec Scan](https://docs.divvycloud.com/docs/iac-cli-scanning-tool) Github Action allows security and development teams to integrate infrastructure-as-code (IaC) scanning in their CI/CD pipelines.\n\n# About insightCloudSec\n[insightCloudSec](https://www.rapid7.com/products/insightcloudsec/) secures your public cloud environment from development to production with a modern, integrated, and automated approach. \n\n# Usage\nTwo secrets need to be added for the action to work:\n- `ICS_BASE_URL` - The URL of your InsightCloudSec server\n- `ICS_API_KEY` - An InsightCloudSec API key\n\nRead how to set secrets here: https://docs.github.com/en/actions/security-guides/encrypted-secrets\n\n```yaml\n- uses: rapid7/insightcloudsec-actions@latest\n  with:\n    # \"ICS_API_KEY\" secret\n    api_key: ${{ secrets.ics_api_key }}\n\n    # \"ICS_BASE_URL\" secret\n    base_url: ${{ secrets.ics_base_url }}\n\n    # Name of the IaC config you wish to scan with\n    config_name: AWS CIS Benchmark 1.4\n\n    # Optional file(s) to scan (default: all files in the repository excluding the .git/ directory)\n    target: ./[^.git]*\n```\n\nAn example workflow may look like this:\n```yaml\non:\n  pull_request:\n    branches:\n      - master\n      - main\n\njobs:\n  ics-scan-and-upload:\n    name: insightCloudSec repository scan with Github Advanced Security\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions/checkout@v4\n      - name: Scan the repository\n        uses: rapid7/insightcloudsec-actions@latest\n        with:\n          api_key: ${{ secrets.ics_api_key }}\n          base_url: ${{ secrets.ics_base_url }}\n          config_name: AWS CIS Benchmark 1.4\n      # the following is optional but recommended to retrieve scan reports and logs\n      - name: Attach scan artifacts\n        if: always()\n        uses: actions/upload-artifact@v4\n        with:\n          name: mimics-scan-artifacts\n          path: |\n            ./log/mimics*.log\n            ./ics_scan.*\n      # the following is optional but recommended to surface results to Github Advanced Security\n      - name: Upload the sarif report to Github Advanced Security\n        if: always()\n        uses: github/codeql-action/upload-sarif@v2\n        with:\n          sarif_file: ics_scan.sarif\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frapid7%2Finsightcloudsec-actions","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Frapid7%2Finsightcloudsec-actions","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frapid7%2Finsightcloudsec-actions/lists"}