From 6890ae16e3f9720507e4b0bda030f497fd5e99df Mon Sep 17 00:00:00 2001
From: Ash Davies <3853061+DrizzlyOwl@users.noreply.github.com>
Date: Tue, 10 Dec 2024 15:21:05 +0000
Subject: [PATCH] Include tf lock file as trigger (#1244)

Add missing permissions so that tfsec can write to the PR
---
 .github/workflows/continuous-integration-terraform.yml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/continuous-integration-terraform.yml b/.github/workflows/continuous-integration-terraform.yml
index 3b42f9750..6e2dfc86a 100644
--- a/.github/workflows/continuous-integration-terraform.yml
+++ b/.github/workflows/continuous-integration-terraform.yml
@@ -5,9 +5,15 @@ on:
     branches: main
     paths:
       - 'terraform/**.tf'
+      - 'terraform/**.hcl'
   pull_request:
     paths:
       - 'terraform/**.tf'
+      - 'terraform/**.hcl'
+
+permissions:
+  contents: read
+  pull-requests: write
 
 jobs:
   terraform-validate:
@@ -60,7 +66,7 @@ jobs:
       - name: Setup TFLint
         uses: terraform-linters/setup-tflint@v4
         with:
-          tflint_version: v0.44.1
+          tflint_version: v0.54.0
 
       - name: Run TFLint
         working-directory: terraform