From a2e5f8e5480715e8fcec103ec5c179ac65bac41b Mon Sep 17 00:00:00 2001
From: Owen Rumney <owen@owenrumney.co.uk>
Date: Wed, 14 Apr 2021 18:37:01 +0100
Subject: [PATCH] Add tfsec starter action

---
 .../properties/tfsec.properties.json          |  7 ++++
 code-scanning/tfsec.yml                       | 35 +++++++++++++++++++
 icons/tfsec.svg                               |  1 +
 3 files changed, 43 insertions(+)
 create mode 100644 code-scanning/properties/tfsec.properties.json
 create mode 100644 code-scanning/tfsec.yml
 create mode 100644 icons/tfsec.svg

diff --git a/code-scanning/properties/tfsec.properties.json b/code-scanning/properties/tfsec.properties.json
new file mode 100644
index 0000000..0ecfb53
--- /dev/null
+++ b/code-scanning/properties/tfsec.properties.json
@@ -0,0 +1,7 @@
+{
+    "name": "tfsec",
+    "creator": "tfsec",
+    "description": "Static analysis for Terraform.",
+    "iconName": "tfsec",
+    "categories": ["Code Scanning"]
+}
diff --git a/code-scanning/tfsec.yml b/code-scanning/tfsec.yml
new file mode 100644
index 0000000..d06e719
--- /dev/null
+++ b/code-scanning/tfsec.yml
@@ -0,0 +1,35 @@
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
+
+name: tfsec
+
+on:
+  push:
+    branches: [ $default-branch, $protected-branches ]
+  pull_request:
+    branches: [ $default-branch ]  
+  schedule:
+    - cron: $cron-weekly
+
+jobs:
+  tfsec:
+    name: Run tfsec sarif report
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Clone repo
+        uses: actions/checkout@master
+
+      - name: Run tfsec
+        uses: tfsec/tfsec-sarif-action@v0.0.4
+        with:
+          sarif_file: tfsec.sarif         
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Upload SARIF file
+        uses: github/codeql-action/upload-sarif@v1
+        with:
+          # Path to SARIF file relative to the root of the repository
+          sarif_file: tfsec.sarif  
\ No newline at end of file
diff --git a/icons/tfsec.svg b/icons/tfsec.svg
new file mode 100644
index 0000000..6d78f75
--- /dev/null
+++ b/icons/tfsec.svg
@@ -0,0 +1 @@
+<svg version="1.0" xmlns="http://www.w3.org/2000/svg" width="24.000000pt" height="24.000000pt" viewBox="0 0 24.000000 24.000000" preserveAspectRatio="xMidYMid meet"><g transform="translate(0.000000,24.000000) scale(0.100000,-0.100000)" fill="#000000" stroke="none"><path d="M48 223 c-27 -9 -48 -22 -48 -29 0 -11 8 -10 41 1 55 20 69 19 69 -5 0 -11 5 -20 10 -20 6 0 10 9 10 20 0 24 18 25 67 5 43 -18 43 -18 43 -2 0 15 -88 47 -124 46 -11 0 -42 -7 -68 -16z"/> <path d="M38 168 c-33 -12 -38 -33 -5 -24 12 3 28 6 35 6 6 0 12 7 12 15 0 17 -4 17 -42 3z"/><path d="M160 141 c0 -22 5 -41 11 -43 16 -5 -30 -58 -51 -58 -24 0 -65 51 -49 61 6 3 10 11 8 17 -6 14 -49 -4 -49 -21 0 -20 70 -87 91 -87 15 0 89 71 89 87 0 3 -7 15 -17 25 -15 17 -15 18 10 18 37 0 34 16 -4 29 -18 6 -34 11 -35 11 -2 0 -4 -18 -4 -39z"/> <path d="M110 120 c0 -22 4 -40 9 -40 4 0 8 18 8 40 0 22 -4 40 -8 40 -5 0 -9 -18 -9 -40z"/></g></svg>
\ No newline at end of file