Skip to content

Commit 7bb8bbf

Browse files
committed
fix: Updated README to include usage
1 parent 9f1ef1e commit 7bb8bbf

File tree

1 file changed

+61
-0
lines changed

1 file changed

+61
-0
lines changed

README.md

Lines changed: 61 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,67 @@
22

33
A GitHub action to scan your infrastructure templates modelled either in Terraform or CloudFormation. The type of resources scanned depends on the currently supported list from Cloud Conformity.
44

5+
## Pre-requisites
6+
7+
- You have a Cloud Conformity API key
8+
- You know the Cloud conformity region
9+
510

611
## Usage
712

13+
14+
15+
```yaml
16+
- name: Initiate scan
17+
uses: quixoticmonk/conformity-template-scanner@v1
18+
with:
19+
conformity_region: "us-1"
20+
conformity_api_key: ${{secrets.conformity_api_key}}
21+
template_type: "terraform-template"
22+
template_path: "infra/tf_plan.json"
23+
```
24+
25+
26+
## Input
27+
28+
| Input | Description |
29+
| -------- | ------- |
30+
| conformity_region | Your Cloud conformity region |
31+
| conformity_api_key | Your Cloud conformity API key |
32+
| template_type | Your infrastructure template type |
33+
| template_path | Path of the template to sca |
34+
35+
## Output
36+
37+
The action reviews the generated CloudFormation template or Terraform plan against the conformity api to provide you a categorized output of rules , their risk levels and status. The script is further configured to fail with an exit code of 1 in case of high or Very_high findings.
38+
39+
The output generated will be a json the format below
40+
41+
```bash
42+
43+
{
44+
"DNS Compliant S3 Bucket Names": {
45+
"risk": "LOW",
46+
"status": "SUCCESS"
47+
},
48+
"Enable S3 Block Public Access for S3 Buckets": {
49+
"risk": "MEDIUM",
50+
"status": "FAILURE"
51+
},
52+
.....
53+
"Secure Transport": {
54+
"risk": "MEDIUM",
55+
"status": "FAILURE"
56+
},
57+
"Server Side Encryption": {
58+
"risk": "HIGH",
59+
"status": "FAILURE"
60+
},
61+
"Tags": {
62+
"risk": "LOW",
63+
"status": "FAILURE"
64+
}
65+
}
66+
{'VERY_HIGH': 10, 'MEDIUM': 3, 'LOW': 7, 'HIGH': 1}
67+
68+
```

0 commit comments

Comments
 (0)