Skip to content

Commit

Permalink
docs: Updated Readme
Browse files Browse the repository at this point in the history
  • Loading branch information
quixoticmonk committed Aug 22, 2023
1 parent 695d01f commit 845bac2
Showing 1 changed file with 43 additions and 0 deletions.
43 changes: 43 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,2 +1,45 @@
# conformity-tf-scanner
Terraform template scanner using Conformity API

Conformity template scanner accepts CloudFormation templates, in either YAML or JSON format, and Terraform plan templates only in JSON format.


## Pre-requisites

- You have a Cloud Conformity API key
- You have an AWS account with GitHub actions configured to assume role. We are not using this role to provision any resources, but required for Terraform plan stage.


## Output

The python script reviews the generated Terraform plan against the conformity api to provide you a categorized output of rules , their risk levels and status.
The script is further configured to fail with an exit code of 1 in case of high or Very_high findings. This can be configured as needed.

```bash

{
"DNS Compliant S3 Bucket Names": {
"risk": "LOW",
"status": "SUCCESS"
},
"Enable S3 Block Public Access for S3 Buckets": {
"risk": "MEDIUM",
"status": "FAILURE"
},
.....
"Secure Transport": {
"risk": "MEDIUM",
"status": "FAILURE"
},
"Server Side Encryption": {
"risk": "HIGH",
"status": "FAILURE"
},
"Tags": {
"risk": "LOW",
"status": "FAILURE"
}
}
{'VERY_HIGH': 10, 'MEDIUM': 3, 'LOW': 7, 'HIGH': 1}

```

0 comments on commit 845bac2

Please sign in to comment.