Configure CI/CD pipeline

[kczpl]

CI/CD pipeline should include steps to automatically format your Terraform code and run a Checkov security scan.

[kczpl]

https://www.checkov.io/4.Integrations/GitHub%20Actions.html

[bender2352]

We're working on Terraform CI/CD at Terrateam. It's Terraform PR-based automation with a checkov integration. Might be worth checking out instead of a homegrown GitHub Actions workflow.

https://github.com/terrateamio/terrateam

In Terrateam you'd configure Checkov like this:

workflows:
  - tag_query: ''
    plan:
      - type: init
      - type: plan
      - type: run
        cmd: ['checkov-wrapper']
        capture_output: true

[kczpl]

Hi @bender2352, thank you for sharing your insights. I will check your project, it looks really interesting