Infrastructure as Code (IaC) GitHub Workflow

The Infrastructure as Code (iac) component focuses on analyzing your infrastructure code for security vulnerabilities. This component helps in identifying misconfigurations and security risks in your infrastructure setup, ensuring that your cloud resources are configured securely before deployment.

The iac workflow accepts the following inputs:

NameDescriptionRequiredDefault Value
api-urlURL of the DevGuard APINohttps://api.devguard.org
asset-nameName of the asset to be scannedYes
pathPath to the source code to be scannedNo.

Usage Example:

Here's an example of how to call this reusable workflow from another workflow file:

name: DevGuard Workflow

on:
    push

jobs:
    devguard-iac:
        uses: l3montree-dev/devguard-action/.github/workflows/iac.yml@main
        with:
          api-url: https://api.devguard.org
          asset-name: 'myOrganization/projects/myProject/assets/myAsset'
        secrets:
          devguard-token: ${{ secrets.DEVGUARD_TOKEN }}