tfsec

Installation

1. Install the tfsec task in your Azure DevOps organization (hit the Get it free button above).

2. Add the task to your azure-pipelines.yml in a project where you'd like to run tfsec:

- task: tfsec-custom@1

Configuration

You can supply several inputs to customise the task.

Enable debug mode

Add debug logs to the task output.

- task: tfsec-custom@1
  inputs:
    debug: true

Specify tfsec version

Run a specific version of tfsec.

- task: tfsec-custom@1
  inputs:
    version: v1.28.1

Specify custom command line options

- task: tfsec-custom@1
  inputs:
    args: --workspace my-workspace --config-file ./tfsec.yml

Specify the directory to scan

- task: tfsec-custom@1
  inputs:
    dir: ./terraform

Specify the directory to download tfsec binnary and store resuls files on Linux agents, Default is /tmp/

- task: tfsec-custom@1
  inputs:
    tmpPath: /tmp/

Skip publishing test results

Specify the url to be used to download tfsec binary, example : /v1.28.1/tfsec-checkgen-linux-amd64

Internal url should follow the pattern downloadUrl/

- task: tfsec-custom@1
  inputs:
    downloadUrl: "https://github.com/aquasecurity/tfsec/releases/download"
    

Skip publishing test results

Avoid results showing the in 'Tests' tab of the Pipelines UI.

- task: tfsec-custom@1
  inputs:
    publishTestResults: false

Informational only

If you'd like to see the tfsec results in your build, but avoid causing it to fail when issues are discovered, you can add the --soft-fail flag to your command line arguments using:

- task: tfsec-custom@1
  inputs:
    args: --soft-fail