Initiate CDK Pipeline #170

	name: Pull Request Build

	on:
	pull_request:
	branches:
	- main

	# Actions Used (please keep this documented here as added)
	# https://github.com/marketplace/actions/checkout
	# https://github.com/marketplace/actions/setup-python
	# https://github.com/marketplace/actions/trufflehog-oss
	# https://github.com/marketplace/actions/checkout
	# https://github.com/marketplace/actions/cache

	jobs:
	build:
	# Default access (restricted) - https://docs.github.com/en/actions/security-guides/automatic-token-authentication
	permissions:
	contents: read

	runs-on: ubuntu-latest

	steps:
	- name: Print toolchain versions
	run: \|
	node -v
	python3 -V
	pip3 -V
	make --version

	# TODO see whether we can leverage https://github.com/pre-commit/action
	- name: Install system-wide tools dependencies
	run: \|
	pip3 install pre-commit detect-secrets black ggshield awscli-local

	- name: Checkout code
	uses: actions/checkout@v3
	with:
	fetch-depth: 0

	- name: TruffleHog OSS
	uses: trufflesecurity/[email protected]
	with:
	path: ./
	base: ${{ github.event.repository.default_branch }}
	head: HEAD
	extra_args: --debug --only-verified

	- name: Install dependencies
	run: \|
	make install

	- name: Lint and code formatting
	run: \|
	make check

Provide feedback