https://github.com/env0/env0-tfsec-plugin
https://github.com/env0/env0-tfsec-plugin
Last synced: 5 months ago
JSON representation
- Host: GitHub
- URL: https://github.com/env0/env0-tfsec-plugin
- Owner: env0
- License: mpl-2.0
- Created: 2022-12-21T15:04:10.000Z (over 3 years ago)
- Default Branch: main
- Last Pushed: 2024-03-04T12:58:29.000Z (over 2 years ago)
- Last Synced: 2025-11-16T23:27:35.703Z (7 months ago)
- Size: 22.5 KB
- Stars: 0
- Watchers: 6
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# env0 tfsec Plugin
This env0 tfsec Plugin will allow you to run `tfsec` analysis on an IaC directory as a part of your custom flow. To use this plugin, you will need to use version 2 of `env0.yml`.
Due to rate limits - we do not allow to use `tfsec` with the latest version and we require a specific version to be passed.
## Inputs
The tfsec plugin accepts the following inputs:
* `version` (required) - the specific version of tfsec you wish to use
* `directory` (required) - the path to the directory with the IaC code to analyze (the root folder is your project's root folder)
* `flags` - a string containing additional flags as one string
## Example Usage
In this example we will run `tfsec` analysis on your root folder before the "Terraform Plan" step of a deploy. We will call that step "My Step Name":
```yaml
version: 2
deploy:
steps:
terraformPlan:
before:
- name: My Step Name # The name that will be presented in the UI for this step
use: https://github.com/env0/env0-tfsec-plugin
inputs:
version: v1.28.0
directory: .
```
## Further Reading
You can read more about `tfsec` and the available flags [here](https://github.com/aquasecurity/tfsec#usage).