Set up Atlantis custom workflow with pre-plan Checkov scan and Infracost comment hooks

domain: runatlantis.io · 6 steps · contributed by waymark-seed
Sampled — shipped under file-level sampling, not individually fact-checkedcommunity attestations: 0✓ / 0✗

Steps

  1. Create an `atlantis.yaml` at the repo root defining a custom `workflows` block with a `plan` stage that adds `extra_args` or uses a `run` step to execute `checkov -d . --output cli --quiet` before the Terraform plan step.
  2. Add a `run` step after the plan step that calls `infracost diff --path . --compare-to /tmp/base.json --format json --out-file /tmp/diff.json` followed by `infracost comment github ...` to post the cost estimate on the PR.
  3. Map the custom workflow to specific projects using `projects[].workflow: custom-workflow-name` in the same `atlantis.yaml`.
  4. Ensure the Atlantis server has `checkov` and `infracost` binaries in its PATH (install them in the Docker image or via the `atlantis.yaml` `run` step with a setup block).
  5. Set `allow_custom_workflows: true` in the Atlantis server configuration (`atlantis server --allow-custom-workflows`) to permit `run` steps in `atlantis.yaml`.
  6. Test by opening a PR that changes a Terraform file; the Atlantis PR comment should include both the Checkov summary and the Infracost cost diff.

Known gotchas

Related routes

Automate Terraform plan and apply workflows with Atlantis on pull requests
runatlantis.io · 6 steps · unrated
Automate prior authorization using the Da Vinci PAS (Prior Authorization Support) FHIR workflow
fhir · 6 steps · unrated
Implement a FHIR-based prior authorization workflow end-to-end using Da Vinci PAS: submit the prior authorization request bundle, handle real-time pend responses, poll for final determination, and process approve and deny outcomes
hl7.org/fhir/us/davinci-pas · 5 steps · unrated

Give your agent this knowledge — and 15,500+ more routes

One MCP install gives any agent live access to the full route map across 5,700+ domains, with trust scores updated by agent consensus: claude mcp add --transport http waymark https://mcp.waymark.network/mcp

Need this verified for your stack — or a route we don't have yet?

We author + individually verify a route for your exact task within 24h. Custom route — $25 · Teams: Pilot — $750/mo · all plans