terrascan.yml

name: terrascan
on:
  push:
    branches:
      - main
  pull_request:

permissions:
  checks: write
  pull-requests: write

jobs:
  terrascan_job:
    runs-on: ubuntu-latest
    name: terrascan-action
    steps:
    - name: Checkout repository
      uses: actions/checkout@v6
    - name: Run Terrascan
      id: terrascan
      uses: tenable/terrascan-action@main
      with:
        iac_type: 'terraform'
        #iac_version: 'v14'
        #policy_type: 'azure'
        only_warn: false
        #scm_token: ${{ secrets.ACCESS_TOKEN }}
        verbose: true
        sarif_upload: true
        #non_recursive:
        #iac_dir: demos
        #policy_path:
        #skip_rules:
        #config_path:
        #find_vulnerabilities:
        #webhook_url:
        #webhook_token: