diff --git a/.github/workflows/terraform-checks.yml b/.github/workflows/terraform-checks.yml index 2cd9734..44ece24 100644 --- a/.github/workflows/terraform-checks.yml +++ b/.github/workflows/terraform-checks.yml @@ -7,6 +7,7 @@ on: env: TERRAFORM_DOCS_VERSION: v0.16.0 + HCLEDIT_VERSION: 0.2.3 jobs: collectInputs: @@ -20,7 +21,7 @@ jobs: - name: Get root directories id: dirs - uses: clowdhaus/terraform-composite-actions/directories@v1.4.1 + uses: clowdhaus/terraform-composite-actions/directories@v1.5.0 preCommitMinVersions: name: Min TF pre-commit @@ -33,27 +34,30 @@ jobs: - name: Checkout uses: actions/checkout@v3 + - name: tfsec + uses: tfsec/tfsec-sarif-action@master + - name: Terraform min/max versions id: minMax - uses: clowdhaus/terraform-min-max@v1.0.7 + uses: clowdhaus/terraform-min-max@v1.0.8 with: directory: ${{ matrix.directory }} - name: Pre-commit Terraform ${{ steps.minMax.outputs.minVersion }} # Run only validate pre-commit check on min version supported if: ${{ matrix.directory != '.' }} - uses: clowdhaus/terraform-composite-actions/pre-commit@v1.4.1 + uses: clowdhaus/terraform-composite-actions/pre-commit@v1.5.0 with: terraform-version: ${{ steps.minMax.outputs.minVersion }} - args: 'terraform_validate --color=always --show-diff-on-failure --files ${{ matrix.directory }}/*' + args: "terraform_validate --color=always --show-diff-on-failure --files ${{ matrix.directory }}/*" - name: Pre-commit Terraform ${{ steps.minMax.outputs.minVersion }} # Run only validate pre-commit check on min version supported if: ${{ matrix.directory == '.' }} - uses: clowdhaus/terraform-composite-actions/pre-commit@v1.4.1 + uses: clowdhaus/terraform-composite-actions/pre-commit@v1.5.0 with: terraform-version: ${{ steps.minMax.outputs.minVersion }} - args: 'terraform_validate --color=always --show-diff-on-failure --files $(ls *.tf)' + args: "terraform_validate --color=always --show-diff-on-failure --files $(ls *.tf)" preCommitMaxVersion: name: Max TF pre-commit @@ -68,10 +72,15 @@ jobs: - name: Terraform min/max versions id: minMax - uses: clowdhaus/terraform-min-max@v1.0.7 + uses: clowdhaus/terraform-min-max@v1.0.8 - name: Pre-commit Terraform ${{ steps.minMax.outputs.maxVersion }} - uses: clowdhaus/terraform-composite-actions/pre-commit@v1.4.1 + uses: clowdhaus/terraform-composite-actions/pre-commit@v1.5.0 with: terraform-version: ${{ steps.minMax.outputs.maxVersion }} terraform-docs-version: ${{ env.TERRAFORM_DOCS_VERSION }} + install-hcledit: true + hcledit-version: ${{ env.HCLEDIT_VERSION }} + + - name: check + run: hcledit --help