Skip to content

chore(deps): lock file maintenance (#1407) #1461

chore(deps): lock file maintenance (#1407)

chore(deps): lock file maintenance (#1407) #1461

name: "Terraform security scan"
on:
push:
branches:
- main
paths:
- "terragrunt/**"
- ".github/workflows/terraform-security-scan.yml"
pull_request:
paths:
- "terragrunt/**"
- ".github/workflows/terraform-security-scan.yml"
jobs:
terraform-security-scan:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
- name: Checkov security scan
uses: bridgecrewio/[email protected]
with:
config_file: terragrunt/.checkov.yml
directory: terragrunt/aws
framework: terraform
output_format: cli
quiet: true
soft_fail: false