diff --git a/.github/workflows/aws-template-terraform.yml b/.github/workflows/aws-template-terraform.yml index 69cd7c88..49feb9cc 100644 --- a/.github/workflows/aws-template-terraform.yml +++ b/.github/workflows/aws-template-terraform.yml @@ -58,10 +58,15 @@ jobs: steps: - name: Checkout repository uses: actions/checkout@v4 - - name: tfsec - uses: aquasecurity/tfsec-action@v1.0.3 + - name: Run tfsec + uses: aquasecurity/tfsec-sarif-action@21ded20e8ca120cd9d3d6ab04ef746477542a608 with: working_directory: ${{ inputs.CONTEXT_FOLDER }} + sarif_file: tfsec.sarif + - name: Upload SARIF file + uses: github/codeql-action/upload-sarif@v3 + with: + sarif_file: tfsec.sarif needs: [check_changes] deploy_infra: