diff --git a/.github/workflows/terraform-job.yml b/.github/workflows/terraform-job.yml index 815de4c..3216093 100644 --- a/.github/workflows/terraform-job.yml +++ b/.github/workflows/terraform-job.yml @@ -79,16 +79,18 @@ jobs: env: AWS_DEFAULT_REGION: ${{ inputs.aws-default-region }} - tfsec: - name: TFSec + trivy: + name: Trivy Security Scan runs-on: ubuntu-22.04 - continue-on-error: ${{ inputs.tfsec-continue-on-error }} steps: - uses: actions/checkout@v4.2.1 - - name: TFSec - uses: triat/terraform-security-scan@v3.2.0 + - name: Trivy IaC Scan + uses: aquasecurity/trivy-action@master + continue-on-error: ${{ inputs.tfsec-continue-on-error }} with: - tfsec_actions_comment: false + scan-type: 'config' + scan-ref: '.' + severity: 'HIGH,CRITICAL' # tfdocs: # name: TFDocs