fix: Add tfsec ignore marker temporarily (#28)

Refs: #DA-3488 Signed-off-by: Christian Witts <christian@honestbank.com>
honestbank · Jun 11, 2024 · 838ecc2 · 838ecc2
1 parent 48fa2cf
commit 838ecc2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modules/google_service_account/iam-memberships.tf b/modules/google_service_account/iam-memberships.tf
@@ -33,7 +33,7 @@ resource "google_project_iam_member" "project_iam_memberships" {
   member = "serviceAccount:${google_service_account.service_account.email}"
 
   project = var.project_id
-  role    = each.value.role
+  role    = each.value.role #tfsec:ignore:google-iam-no-project-level-service-account-impersonation
 
   dynamic "condition" {
     for_each = each.value.conditions != null ? each.value.conditions : []