Skip to content

chore(deps): update all non-major github action dependencies #87

chore(deps): update all non-major github action dependencies

chore(deps): update all non-major github action dependencies #87

name: "Terraform Plan"
on:
workflow_dispatch:
pull_request:
paths:
- "terragrunt/**"
- ".github/workflows/tf_plan_production.yml"
env:
AWS_REGION: ca-central-1
TERRAFORM_VERSION: 1.4.6
TERRAGRUNT_VERSION: 0.45.11
CONFTEST_VERSION: 0.42.1
permissions:
id-token: write
contents: read
pull-requests: write
actions: write
checks: write
statuses: write
jobs:
terragrunt-plan:
strategy:
fail-fast: false
matrix:
include:
- module: s3
- module: hosted_zone
- module: cloudfront
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
- name: set up terraform tools
uses: cds-snc/terraform-tools-setup@v1
- name: configure aws credentials using OIDC
uses: aws-actions/configure-aws-credentials@67fbcbb121271f7775d2e7715933280b06314838 # tag=v1.7.0
with:
role-to-assume: arn:aws:iam::521732289257:role/digital-canada-ca-plan # TF plan
role-session-name: TFPlan
aws-region: ${{ env.AWS_REGION }}
- name: Terraform Plan
uses: cds-snc/terraform-plan@28d2efe5155573489fa5b5816fad20d44d1f274b # v3.0.7
with:
comment-delete: true
comment-title: "Production: ${{ matrix.module }}"
directory: terragrunt/env/production/${{ matrix.module }}
github-token: ${{ secrets.GITHUB_TOKEN }}
terragrunt: true