Hamburger Cross Icon
IaC Scan Guardrails - Executed

Executed

✓ Guardrail IaC Scan Guardrails Stable Security And Compliance
iac-scan.executed

Verifies that IaC scanning was executed on the component. Fails if no scanner has written to .iac_scan.

iac infrastructure security scanning compliance terraform
Get Started View All IaC Scan Guardrails

Compatible Integrations

This guardrail works with the following integrations. Click to see how to use Executed with each collector.

+
Executed + GitHub Collector Provides IaC scan data via GitHub App integrations
→

Enable This Guardrail

Add the parent policy to your lunar-config.yml to enable this guardrail.

📄 lunar-config.yml 
policies:
  - uses: github://earthly/lunar-lib/policies/iac-scan@v1.0.0
    include: [executed]
    # with: ...

How This Guardrail Works

This guardrail is part of the IaC Scan Guardrails policy. It evaluates data collected by integrations and produces a pass/fail check with actionable feedback.

When enabled, this check runs automatically on every PR and in AI coding workflows, providing real-time enforcement of your engineering standards.

Learn How Lunar Works →
1
↓ Integrations Gather Data
Collectors extract metadata from code, CI pipelines, tool outputs, and scans
2
{ } Centralized as JSON
All data merged into each component's unified metadata document
3
✓ This Guardrail Checks Current
Executed runs and provides pass/fail feedback

Configuration Options

These inputs can be configured in your lunar-config.yml to customize how the parent policy (and this guardrail) behaves.

Input Required Default Description
min_severity Optional high Minimum severity to fail on (critical, high, medium, low)
max_total_threshold Required — Maximum total findings allowed (must be configured)

Related Guardrails

Other guardrails in the IaC Scan Guardrails policy.

Guardrail Security And Compliance
Max Severity

Ensures no findings at or above the configured severity threshold. Configure min_severity to set the threshold...
Guardrail Security And Compliance
Max Total

Ensures total IaC findings are under a configurable threshold.
IaC Scan Guardrails

IaC Scan Guardrails

This guardrail is part of the IaC Scan Guardrails policy, which includes 3 guardrails for security and compliance.

View Policy

Ready to Automate Your Standards?

See how Lunar can turn your engineering wiki, compliance docs, or postmortem action items into automated guardrails with our 100+ built-in guardrails.

Works with any process
check Infrastructure conventions
check Post-mortem action items
check Security & compliance policies
check Testing & quality requirements
Automate Now
Turn any process doc into guardrails
Book a Demo