Releases · suzuki-shunsuke/tfaction

17 Feb 04:53

github-actions

v1.1.1

fb618c2

v1.1.1

Issues | Pull Requests | v1.1.0...v1.1.1 | Base revision

Fixes

#1538 chore(deps): update suzuki-shunsuke/trivy-config-action action to v0.2.2

You can specify Trivy's configuration file path by the environment variable TRIVY_CONFIG in GitHub Actions Workflows.

env:
  TRIVY_CONFIG: ${{ github.workspace }}/trivy.yaml

Assets 2

12 Feb 00:26

github-actions

v1.1.0

58d26ec

v1.1.0

Issues | Pull Requests | v1.0.4...v1.1.0 | Base revision

Features

#1519 Allow conftest policy directory to be specified in global config

Assets 2

09 Feb 04:38

github-actions

v1.1.0-1

b9900b0

v1.1.0-1 Pre-release

Pre-release

v1.1.0-1...v1.1.0-1 | Base revision

Features

#1519 Allow conftest policy directory to be specified in global config

Assets 2

08 Feb 13:42

github-actions

v1.0.4

679205d

v1.0.4

Issues | Pull Requests | v1.0.3...v1.0.4 | Base revision

Bug Fixes

#1512 #1513 list-targets-with-changed-files: Fix a bug that the action list-targets-with-changed-files failed due to the error Error: "[object Object]" is not valid JSON in the apply workflow

Assets 2

07 Feb 23:45

github-actions

v1.0.3

1c1f08c

v1.0.3

Issues | Pull Requests | v1.0.2...v1.0.3 | Base revision

Caution

This release has a critical bug. Please update to v1.0.4 or newer.
#1512

Refactoring

#1474 Format codes with prettier
#1475 Remove codes regarding the deprecated setting s3_bucket_name_plan_file
#1476 Remove codes regarding the deprecated setting gcs_bucket_name_plan_file
#1479 Refactor TypeScript

Add unit tests using Jest
Remove copy and paste and share codes properly
Refactor TypeScript using features such as optional chaining
Use zod

Assets 2

27 Jan 12:04

github-actions

v1.0.2

550c34b

v1.0.2

Issues | Pull Requests | v1.0.1...v1.0.2 | Base revision

Bug Fixes

#1471 test: fix a bug that *.tf isn't formatted automatically by terraform fmt if the event type is pull_request_target

Assets 2

19 Dec 11:04

github-actions

v1.0.1

233b3ee

v1.0.1

Issues | Pull Requests | v1.0.0...v1.0.1 | Base revision

Bug Fixes

#1398 #1407 release-module: Fix a bug that tfaction can't release modules that is more than 2+ level of directories

Assets 2

17 Dec 23:13

github-actions

v1.0.0

5a88e75

v1.0.0

Issues | Pull Requests | v0.7.3...v1.0.0 | Base revision

🎉 Finally, tfaction v1 is out 🎉

Thank you for your contribution!
Especially, thank you @rrreeeyyy and @nari-ex from Topotal, inc.
They cooperated the test of v1! #1349

Overviews

⚠️ Breaking Changes
- #1286 #1291 list-targets: Outputs terraform_targets and tfmigrate_targets are removed
- #1284 #1291 scaffold-working-dir: Stop adding conftest to aqua.yaml
- #1285 #1291 get-global-config: Skip creating aqua.yaml by default
- #1283 #1291 get-global-config: Enable trivy and disable tfsec by default
- #1282 #1291 actions inputs github_app_token were removed
- #1340 #1291 scaffold-module: Separate the action with two actions
Features
- #1343 #1291 Support destroying resources
Others
- #1290 #1291 Upgrade Node.js to 20

Features

Support destroying resources

#1343 #1291

Support destroying resources with terraform plan's -destroy option.
If you want to destroy all resources, please set destroy: true in tfaction.yaml.

tfaction.yaml

destroy: true

How to upgrade

Merge jobs for terraform and tfmigrate according to the guide

https://github.com/suzuki-shunsuke/tfaction/releases/tag/v0.7.3

Add conftest to aqua.yaml on the repository root directory

aqua g -i open-policy-agent/conftest

Remove conftest from aqua.yaml on each working directory
Add aqua.yaml to working directory's templates

aqua init
aqua g -i terraform-linters/tflint aquasecurity/trivy hashicorp/terraform

We don't recommend but if you don't want to add aqua.yaml to working directory's templates and want to keep the previous behaviour, you can keep generating aqua.yaml automatically.

tfaction-root.yaml

scaffold_working_directory:
  skip_adding_aqua_packages: false

Migrate tfsec to trivy

Please follow the official migration guide.

https://github.com/aquasecurity/tfsec#-tfsec-to-trivy-migration

And remove tfsec from aqua.yaml and add trivy to aqua.yaml

aqua g -i aquasecurity/trivy

We don't recommend but if you don't want to migrate tfsec to trivy, you can keep using tfsec instead of trivy.

tfaciton-root.yaml

tfsec:
  enabled: true
trivy:
  enabled: false

Remove inputs github_token and rename inputs github_app_token to github_token

tfaction creates pull requests and push commits using github_token.
To trigger new workflow runs, github_token should be GitHub access token issued by GitHub App rather than GitHub Actions token ${{github.token}}.

https://docs.github.com/en/actions/security-guides/automatic-token-authentication#using-the-github_token-in-a-workflow

When you use the repository's GITHUB_TOKEN to perform tasks, events triggered by the GITHUB_TOKEN, with the exception of workflow_dispatch and repository_dispatch, will not create a new workflow run.

Before

      - uses: suzuki-shunsuke/tfaction/setup@v0.7.3
        with:
          github_token: ${{ github.token }}
          github_app_token: ${{ steps.generate_token.outputs.token }}

After

      - uses: suzuki-shunsuke/tfaction/setup@v1.0.0
        with:
          github_token: ${{ steps.generate_token.outputs.token }}

Fix the workflow to scaffold Terraform Modules

Remove the input module_path
Set environment variables TFACTION_MODULE_PATH and TFACTION_MODULE_TEMPLATE_DIR
Add templates for scaffolding Terraform Modules example

Before

on:
  workflow_dispatch:
    inputs:
      module_path:
        description: 'module path'
        required: true
jobs:
  scaffold:
    # ...
    steps:
      # ...
      - uses: suzuki-shunsuke/tfaction/scaffold-module@v0.7.3
        with:
          github_token: ${{steps.generate_token.outputs.token}}
          module_path: ${{inputs.module_path}}

After

on:
  workflow_dispatch:
    inputs:
      module_path:
        description: 'module path'
        required: true
      template_dir: # Add the input
        type: choice
        default: templates/module-aws
        options:
          - templates/module-aws
jobs:
  scaffold:
    # ...
    env: # Set environment variables
      TFACTION_MODULE_PATH: ${{inputs.module_path}}
      TFACTION_MODULE_TEMPLATE_DIR: ${{inputs.template_dir}}
    steps:
      # ...
      - uses: suzuki-shunsuke/tfaction/scaffold-module@v1.0.0
        with: # Remove the input module_path
          github_token: ${{steps.generate_token.outputs.token}}
      - uses: suzuki-shunsuke/tfaction/create-scaffold-module-pr@v1.0.0
        with:
          github_token: ${{steps.generate_token.outputs.token}}

Upgrade actions to v1

Before

      - uses: suzuki-shunsuke/tfaction/create-scaffold-module-pr@v0.7.3

After

      - uses: suzuki-shunsuke/tfaction/create-scaffold-module-pr@v1.0.0

Example

Contributors

rrreeeyyy and nari-ex

Assets 2

07 Dec 23:07

github-actions

v1.0.0-2

0b27c97

v1.0.0-2 Pre-release

Pre-release

Issues | Pull Requests | v1.0.0-2...v1.0.0-2 | Base revision

Assets 2

27 Nov 00:32

github-actions

v1.0.0-1

e14be09

v1.0.0-1 Pre-release

Pre-release

v0.7.3...v1.0.0-1 | Base revision

Call for Testers

#1349

Overviews

⚠️ Breaking Changes
- #1286 #1291 list-targets: Outputs terraform_targets and tfmigrate_targets are removed
- #1284 #1291 scaffold-working-dir: Stop adding conftest to aqua.yaml
- #1285 #1291 get-global-config: Skip creating aqua.yaml by default
- #1283 #1291 get-global-config: Enable trivy and disable tfsec by default
- #1282 #1291 actions inputs github_app_token were removed
- #1340 #1291 scaffold-module: Separate the action with two actions
Features
- #1343 #1291 Support destroying resources
Others
- #1290 #1291 Upgrade Node.js to 20

Features

Support destroying resources

#1343 #1291

Support destroying resources with terraform plan's -destroy option.
If you want to destroy all resources, please set destroy: true in tfaction.yaml.

tfaction.yaml

destroy: true

How to upgrade

Merge jobs for terraform and tfmigrate according to the guide

https://github.com/suzuki-shunsuke/tfaction/releases/tag/v0.7.3

Add conftest to aqua.yaml on the repository root directory

aqua g -i open-policy-agent/conftest

Remove conftest from aqua.yaml on each working directory
Add aqua.yaml to working directory's templates

aqua init
aqua g -i terraform-linters/tflint aquasecurity/trivy hashicorp/terraform

We don't recommend but if you don't want to add aqua.yaml to working directory's templates and want to keep the previous behaviour, you can keep generating aqua.yaml automatically.

tfaction-root.yaml

scaffold_working_directory:
  skip_adding_aqua_packages: false

Migrate tfsec to trivy

Please follow the official migration guide.

https://github.com/aquasecurity/tfsec#-tfsec-to-trivy-migration

And remove tfsec from aqua.yaml and add trivy to aqua.yaml

aqua g -i aquasecurity/trivy

We don't recommend but if you don't want to migrate tfsec to trivy, you can keep using tfsec instead of trivy.

tfaciton-root.yaml

tfsec:
  enabled: true
trivy:
  enabled: false

Remove inputs github_token and rename inputs github_app_token to github_token

https://docs.github.com/en/actions/security-guides/automatic-token-authentication#using-the-github_token-in-a-workflow

When you use the repository's GITHUB_TOKEN to perform tasks, events triggered by the GITHUB_TOKEN, with the exception of workflow_dispatch and repository_dispatch, will not create a new workflow run.

Before

      - uses: suzuki-shunsuke/tfaction/setup@v0.7.3
        with:
          github_token: ${{ github.token }}
          github_app_token: ${{ steps.generate_token.outputs.token }}

After

      - uses: suzuki-shunsuke/tfaction/setup@v1.0.0
        with:
          github_token: ${{ steps.generate_token.outputs.token }}

Fix the workflow to scaffold Terraform Modules

Remove the input module_path
Set environment variables TFACTION_MODULE_PATH and TFACTION_MODULE_TEMPLATE_DIR
Add templates for scaffolding Terraform Modules example

Before

on:
  workflow_dispatch:
    inputs:
      module_path:
        description: 'module path'
        required: true
jobs:
  scaffold:
    # ...
    steps:
      # ...
      - uses: suzuki-shunsuke/tfaction/scaffold-module@v0.7.3
        with:
          github_token: ${{steps.generate_token.outputs.token}}
          module_path: ${{inputs.module_path}}

After

on:
  workflow_dispatch:
    inputs:
      module_path:
        description: 'module path'
        required: true
      template_dir: # Add the input
        type: choice
        default: templates/module-aws
        options:
          - templates/module-aws
jobs:
  scaffold:
    # ...
    env: # Set environment variables
      TFACTION_MODULE_PATH: ${{inputs.module_path}}
      TFACTION_MODULE_TEMPLATE_DIR: ${{inputs.template_dir}}
    steps:
      # ...
      - uses: suzuki-shunsuke/tfaction/scaffold-module@v1.0.0
        with: # Remove the input module_path
          github_token: ${{steps.generate_token.outputs.token}}
      - uses: suzuki-shunsuke/tfaction/create-scaffold-module-pr@v1.0.0
        with:
          github_token: ${{steps.generate_token.outputs.token}}

Upgrade actions to v1

Before

      - uses: suzuki-shunsuke/tfaction/create-scaffold-module-pr@v0.7.3

After

      - uses: suzuki-shunsuke/tfaction/create-scaffold-module-pr@v1.0.0

Example

https://github.com/suzuki-shunsuke/tfaction-example/tree/example-v1-2

Assets 2

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Fixes

Features

Features

Bug Fixes

Refactoring

Bug Fixes

Bug Fixes

🎉 Finally, tfaction v1 is out 🎉

Overviews

Features

Support destroying resources

How to upgrade

Example

Contributors

Call for Testers

Overviews

Features

Support destroying resources

How to upgrade

Example

Releases: suzuki-shunsuke/tfaction

v1.1.1

Fixes

v1.1.0

Features

v1.1.0-1

Features

v1.0.4

Bug Fixes

v1.0.3

Refactoring

v1.0.2

Bug Fixes

v1.0.1

Bug Fixes

v1.0.0

🎉 Finally, tfaction v1 is out 🎉

Overviews

Features

Support destroying resources

How to upgrade

Example

Contributors

v1.0.0-2

v1.0.0-1

Call for Testers

Overviews

Features

Support destroying resources

How to upgrade

Example