GitHub Action for cloudexit
ActionsThis is the official GitHub Action for cloudexit, built by EscapeCloud to run automated cloud exit readiness assessments in CI/CD.
It supports both static credentials and short-lived OIDC authentication for AWS and Azure.
| Name | Required | Default | Description |
|---|---|---|---|
provider |
Yes | — | Cloud provider: aws or azure |
auth-mode |
No | static |
Authentication mode: static or oidc |
exit-strategy |
Yes | — | Exit strategy: 1 or 3 |
assessment-type |
Yes | — | Assessment type: 1 or 2 |
version |
No | v1.1.1 |
cloudexit version tag to checkout |
host |
No | "" |
Passed as HOST; empty keeps offline mode |
key |
No | "" |
Passed as KEY; empty keeps offline mode |
report-dir: latest generated report directory path (for examplecloudexit/reports/20260614123456)
- name: Run cloudexit
uses: escapecloud/cloudexit-actions@v1
with:
provider: aws
auth-mode: static
exit-strategy: "1"
assessment-type: "1"
env:
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
AWS_DEFAULT_REGION: ${{ vars.AWS_DEFAULT_REGION }}permissions:
id-token: write
contents: read
steps:
- uses: aws-actions/configure-aws-credentials@v4
with:
role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
aws-region: ${{ vars.AWS_DEFAULT_REGION }}
- uses: escapecloud/cloudexit-actions@v1
with:
provider: aws
auth-mode: oidc
exit-strategy: "1"
assessment-type: "1"
env:
AWS_DEFAULT_REGION: ${{ vars.AWS_DEFAULT_REGION }}For complete setup guides (AWS/Azure, static/OIDC, troubleshooting), see:
OIDC mode expects credentials to be prepared by a prior login step (aws-actions/configure-aws-credentials for AWS, azure/login for Azure). Static mode continues to support long-lived credentials.
GitHub Action for cloudexit is not certified by GitHub. It is provided by a third-party and is governed by separate terms of service, privacy policy, and support documentation.
GitHub Action for cloudexit is not certified by GitHub. It is provided by a third-party and is governed by separate terms of service, privacy policy, and support documentation.