Onboarding Generator

Generate the five artifacts needed to wire up DriftGuard scanning for a new repository. DriftGuard never stores credentials or calls AWS/SCM on your behalf. Review and apply each artifact through your own trusted channels (F1 §2.2 — generator, not executor).

Workspace parameters

Only non-secret configuration is collected here. No AWS or SCM credentials are required.

ℹ️ Severity is sourced from Admin-set workspace metadata, not this field (F1 §2.3). This is the OIDC auth pin only.

Optional — leave empty if using Terraform ≥ 1.10 with use_lockfile = true (S3 native locking).

📋

Generated artifacts will appear here.