Skip to content
zap

GitHub Action

Execute CloudConformity scan on stack template

0.3.0 Latest version

Execute CloudConformity scan on stack template

zap

Execute CloudConformity scan on stack template

Using reecetech's Hermitcrab tooling, this action staticly analyses Cloudformation templates.

Installation

Copy and paste the following snippet into your .yml file.

 
              
- name: Execute CloudConformity scan on stack template

              
  uses: reecetech/[email protected]
Learn more about this action in reecetech/cloudconformity-cfn-scan-action

Choose a version

CloudConformity Scan Action 🔎☁️

Scan CloudFormation templates using CloudConformity.

Usage

- id: checkout
  name: Checkout code 🛒
  uses: actions/checkout@v2

- id: cfn-scan
  name: "Run cfn-scan 🔎"
  uses: reecetech/cfn-scan-action@v0
  with:
    cloudconformity-api-key: ###
    aws-region: ap-northeast-1
    cloudconformity-account-id: ###
    file-path: templates/template.yml

CloudConformity account ID is optional (if rules have been configured on account).

Inputs

INPUT TYPE REQUIRED DEFAULT DESCRIPTION
aws-region string true AWS region for the Cloudformation
stack
cloudconformity-account-id string false Cloud Conformity account ID for
data payload
cloudconformity-api-key string true Cloud Conformity API key
file-path string true Path to CloudFormation template
temp-input string false Trigger update-doc step