Flare PR Security Check
Version updated for https://github.com/tryflare-ai/pr-security-check to version v1.
- This action is used across all versions by ? repositories.
Action Type
This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
What’s Changed
Catch IAM misconfigurations, overly broad permissions, and privilege escalation paths before they reach production.
What it does
Reviews Terraform, CloudFormation, and IAM policy changes on every pull request. Posts findings as a PR comment with severity scores, plain-English explanations, and specific fix suggestions.
Features
- 10 security categories - broad IAM roles, public access, privilege escalation, hardcoded secrets, network exposure, missing encryption, and more
- Configurable threshold - fail on critical, high, medium, low, or never
- Smart prioritization - IAM files reviewed first when diffs are large
- Updates in place - re-runs update the existing comment, no duplicates
- No connector required - works with any GitHub repo that has IaC files
Setup
- Create an API key at tryflare.ai/settings
- Add it as a repo secret (FLARE_API_KEY)
- Add the workflow to .github/workflows/flare.yml
Full docs: docs.tryflare.ai/pr-security-check
Quick start
uses: tryflare-ai/pr-security-check@v1
with: token: ${{ secrets.FLARE_API_KEY }}