Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Tfsec config file doesn't support to define soft-fail #27

Open
AshishDadhich4h2 opened this issue May 9, 2023 · 0 comments
Open

Tfsec config file doesn't support to define soft-fail #27

AshishDadhich4h2 opened this issue May 9, 2023 · 0 comments

Comments

@AshishDadhich4h2
Copy link

When we define soft-fail in config file and pass that config file to tfsec cli , it doesn't work.
soft-fail: true #Runs checks but suppresses error code include-passed: true #Resources that pass checks are included in the result output allow-checks-to-panic: true #Allow panics to propagate up from rule checking verbose: true #Enable verbose logging

In Task
`steps:

  • task: tfsec@1
    displayName: "Compliance Run > tfsec"
    inputs:
    debug: true
    dir: $(workdir)
    args: '--config-file $(workdir)/"${{ parameters.tfsec_config_file_path }}" '`

Got an error like ##[error]Failed: tfsec detected misconfigurations.
Means soft-fail: true is not working when it's set in config.yml file.

It should override cli options from config file.
It works for cli option --exclude when we define in config file
`exclude:

  • azure-network-no-public-ingress`

Ideally it should work for other cli options too.

System Info

tfsec version: v1.26.0
terraform version: 1.4.6
OS: Linux

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant