Skip to content

chore(deps): update terraform github.com/dfe-digital/terraform-status… #251

chore(deps): update terraform github.com/dfe-digital/terraform-status…

chore(deps): update terraform github.com/dfe-digital/terraform-status… #251

name: Continuous Integration / Terraform
on:
push:
branches: master
paths:
- 'terraform/**.tf'
pull_request:
paths:
- 'terraform/**.tf'
jobs:
terraform-validate:
name: Validate
runs-on: ubuntu-latest
steps:
- name: Check out code
uses: actions/checkout@v4
- name: Check for terraform version mismatch
run: |
DOTFILE_VERSION=$(cat terraform/.terraform-version)
TERRAFORM_IMAGE_REFERENCES=$(grep "uses: docker://hashicorp/terraform" .github/workflows/continuous-integration-terraform.yml | grep -v TERRAFORM_IMAGE_REFERENCES | wc -l | tr -d ' ')
if [ "$(grep "docker://hashicorp/terraform:${DOTFILE_VERSION}" .github/workflows/continuous-integration-terraform.yml | wc -l | tr -d ' ')" != "$TERRAFORM_IMAGE_REFERENCES" ]
then
echo -e "\033[1;31mError: terraform version in .terraform-version file does not match docker://hashicorp/terraform versions in .github/workflows/continuous-integration-terraform.yml"
exit 1
fi
- name: Validate Terraform docs
uses: terraform-docs/[email protected]
with:
working-dir: terraform
config-file: .terraform-docs.yml
output-file: README.md
output-method: inject
fail-on-diff: true
- name: Remove azure backend
run: rm ./terraform/backend.tf
- name: Run a Terraform init
uses: docker://hashicorp/terraform:1.7.5
with:
entrypoint: terraform
args: -chdir=terraform init
- name: Run a Terraform validate
uses: docker://hashicorp/terraform:1.7.5
with:
entrypoint: terraform
args: -chdir=terraform validate
- name: Run a Terraform format check
uses: docker://hashicorp/terraform:1.7.5
with:
entrypoint: terraform
args: -chdir=terraform fmt -check=true -diff=true
- name: Setup TFLint
uses: terraform-linters/setup-tflint@v4
with:
tflint_version: v0.44.1
- name: Run TFLint
working-directory: terraform
run: tflint -f compact
- name: Run TFSec
uses: aquasecurity/[email protected]
with:
github_token: ${{ github.token }}