v1.0.0

First release of the Draftt Terraform Policy Scan Action.

What it does

• Uploads your Terraform or OpenTofu plan JSON to Draftt and evaluates it against your organization's policies.
• The Draftt CI GitHub App publishes the result as a check on the pull request, with one annotation per violation, and a comment that summarizes the changed resources.
• Sensitive values are removed before upload: anything Terraform marks sensitive, plus credential-shaped strings. Removed values are reported to Draftt as unknown so policies never evaluate a default in their place.
• Pull requests from forks are skipped, never failed.

Usage

- uses: draftt-io/terraform-ci@v1
  with:
    plan-json: plan.json
    api-key: ${{ secrets.DRAFTT_API_KEY }}

v1 follows the latest 1.x release. See the README for the complete workflow, inputs, outputs, what is sent to Draftt and troubleshooting, and https://docs.draftt.io/draftt-ci for setup in Draftt.

Full changelog: v1.0.0-rc.2...v1.0.0

v1.0.0-rc.2

What's Changed

• feat(DRAFTT-1983): CI Terraform - First Implementation by @asaphnd in #1
• fix(DRAFTT-2344): allowlist provider-marked sensitive fields from common resources by @guyelia in #3
• Draftt CI Action v1: upload the plan, the Draftt GitHub App publishes the check by @guyelia in #7
• Release mechanics, Action metadata and repository hygiene by @guyelia in #8
• README for customers: quick start, what is sent to Draftt, versioning and support by @guyelia in #9

New Contributors

• @guyelia made their first contribution in #3

Full Changelog: https://github.com/draftt-io/terraform-ci/commits/v1.0.0-rc.2