tfsec-workflow.yml

##
# https://aquasecurity.github.io/tfsec
name: tfsec
on:
  push:
    branches:
    - main
  pull_request:
jobs:
  tfsec:
    name: tfsec
    runs-on: ubuntu-latest
    steps:
    - name: Clone repo
      uses: actions/checkout@v3.5.3
    - name: tfsec
      uses: aquasecurity/tfsec-action@v1.0.3
      with:
        format: sarif
        github_token: ${{ secrets.GITHUB_TOKEN }}
        additional_args: --out tfsec.sarif
    - name: Upload SARIF Results
      uses: github/codeql-action/upload-sarif@v2
      with:
        sarif_file: tfsec.sarif
        category: tfsec