Skip to content

README.md

Latest commit

 

History

History
33 lines (27 loc) · 1.43 KB

README.md

File metadata and controls

33 lines (27 loc) · 1.43 KB
Raw

Check Rootform evidence

Use check to evaluate a plan export, state export, or saved Form against an explicit Policy selection. No Policy Pack is selected implicitly.

steps:
  - uses: rootform-dev/action/check@v1
    id: policy-check
    with:
      version: <rootform-version>
      input: ${{ runner.temp }}/plan.json
      plan-file: ${{ runner.temp }}/plan.tfplan
      policy-pack: ./policies/team

For raw plan JSON, pair plan-file with the saved binary plan from that same run; a supplied pair must verify. State exports and saved Forms do not use plan-file. Use policy to select or narrow Policies, or policy-pack for local Pack directories or compiled files. Selectors and Pack paths accept one value per line. side applies when checking a Comparison Form; its default is both sides.

The outputs form, result, report, and sarif are same-job file paths. exit-code is Rootform's exact check exit code. The Action publishes available outputs, Summary, and artifact before applying a nonzero exit as the step's failure; GitHub's continue-on-error controls later workflow steps. Artifacts and Summary are enabled by default. Successful upload also exposes artifact-id and artifact-url.

See the complete check input and output reference or return to the Action quickstart.

Replace <rootform-version> with an exact published CLI version.