Skip to content

chore(deps): update terraform azurerm to v4 #301

chore(deps): update terraform azurerm to v4

chore(deps): update terraform azurerm to v4 #301

name: frontdoor-app-service
on:
workflow_dispatch:
pull_request:
paths:
- frontdoor-app-service/**
branches:
- main
push:
paths:
- frontdoor-app-service/**
branches:
- main
jobs:
security:
if: github.event_name != 'push'
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: tfsec
uses: aquasecurity/[email protected]
with:
github_token: ${{ github.token }}
lint:
if: github.event_name != 'push'
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/cache@v4
name: cache plugin
with:
path: ~/.tflint.d/plugins
key: ${{ matrix.os }}-tflint-${{ hashFiles('.tflint.hcl') }}
- uses: terraform-linters/setup-tflint@v4
with:
tflint_version: latest
- name: show version
run: tflint --version
- name: init
run: tflint --init
- name: lint
run: tflint -f compact
plan:
if: github.event_name != 'push'
defaults:
run:
working-directory: frontdoor-app-service
runs-on: ubuntu-latest
env:
ARM_CLIENT_ID: ${{ secrets.AZ_CLIENT_ID }}
ARM_CLIENT_SECRET: ${{ secrets.AZ_CLIENT_SECRET }}
ARM_SUBSCRIPTION_ID: ${{ secrets.AZ_SUBSCRIPTION_ID }}
ARM_TENANT_ID: ${{ secrets.AZ_TENANT_ID }}
steps:
- uses: actions/checkout@v4
- uses: hashicorp/setup-terraform@v3
- name: format
run: terraform fmt -recursive
- name: init
run: terraform init
- name: validate
run: terraform validate
- name: plan
run: terraform plan -refresh=false
# apply:
# if: github.event_name == 'push'
# runs-on: ubuntu-latest
# env:
# ARM_CLIENT_ID: ${{ secrets.AZ_CLIENT_ID }}
# ARM_CLIENT_SECRET: ${{ secrets.AZ_CLIENT_SECRET }}
# ARM_SUBSCRIPTION_ID: ${{ secrets.AZ_SUBSCRIPTION_ID }}
# ARM_TENANT_ID: ${{ secrets.AZ_TENANT_ID }}
# steps:
# - uses: actions/checkout@v3
# - uses: hashicorp/setup-terraform@v2
#
# - name: format
# run: terraform fmt -recursive
#
# - name: init
# run: terraform init
#
# - name: validate
# run: terraform validate
#
# - name: apply
# run: terraform apply -auto-approve -refresh=false