Merge pull request #11 from truefoundry/common-workflows

Moved to common workflows

.github/workflows/lint_clean.yaml

@@ -1,18 +1,9 @@
-name: 'Terraform formatting'
+name: 'Lint and Clean'
 
 on:
-  pull_request:
-
-  push:
-    branches:
-      - main
+  - pull_request
 
 jobs:
-  fmt:
-    name: Terraform FMT
-    runs-on: ubuntu-latest
-    container:
-      image: hashicorp/terraform:latest
-    steps:
-      - uses: actions/checkout@v2
-      - run: terraform fmt --recursive --diff -check=true
+  fmt_and_lint:
+    name: Terraform fmt and tflint
+    uses: truefoundry/github-workflows-public/.github/workflows/[email protected]

.github/workflows/terraform-docs.yaml

@@ -3,14 +3,8 @@ on:
   - pull_request
 
 jobs:
-  docs:
-    runs-on: ubuntu-latest
-    steps:
-    - uses: actions/checkout@v2
-      with:
-        ref: ${{ github.event.pull_request.head.ref }}
-
-    - name: Render terraform docs and push changes back to PR
-      uses: terraform-docs/gh-actions@main
-      with:
-        git-push: "true"
+  terraform-docs-generator:
+    name: Generate terraform docs
+    uses: truefoundry/github-workflows-public/.github/workflows/[email protected]
+    with:
+      commit_ref: ${{ github.event.pull_request.head.ref }}

.github/workflows/terraform-scan.yaml

@@ -0,0 +1,10 @@
+name: Vulnerability scanning
+on:
+  - pull_request
+
+jobs:
+  terraform-scan:
+    name: Vulnerability scanning
+    uses: truefoundry/github-workflows-public/.github/workflows/[email protected]
+    secrets:
+      snyk_token: ${{ secrets.SNYK_TOKEN }}