This is a demo repository to scan CloudFormation templates. The scanned results can be viewed via the Nirmata Policy Manager (NPM).

The GitHub Action converts the CDK file into a CloudFormation template using the cdk synth command.

- name: CDK Synth
  run: |
    cd sample-cdk
    cdk synth --json

In the next step, the policies are applied on the generated JSON file. The results are then published to NPM.

- name: NCTL Scan Repository for CDK
  run: |
    nctl scan json -r sample-cdk/cdk.out/MyEcsStack.template.json --policies policies/ --publish