Generate a IAC step for all the teraform files in a given directory.

gen-iac-gh-action.py

import glob
import os


def generate_github_action(source, filename):
    """
    Snyk IAC scanning tool currently has the limitation of only scanning
    a single file at a time. This script will generate the github
    action steps needed to scan all our IAC code.
    """

    print(f"""
      - name: Scanning {source}/{filename}.tf
        uses: snyk/actions/iac@master
        continue-on-error: true
        env:
          SNYK_TOKEN: ${{{{ secrets.SNYK_TOKEN }}}}
        with:
          file: {source}/{filename}.tf
          args: --sarif-file-output=./sarif/iac-{filename}.sarif""")


def main():
    source = os.environ.get('SOURCE_DIR', '.')
    for path in glob.glob(os.path.join(source, '*.tf')):
        filename = os.path.splitext(os.path.basename(path))[0]
        generate_github_action(source, filename)


if __name__ == "__main__":
    main()