chore(deps): update dependency terraform-linters/tflint-ruleset-aws to v0.30.0 (github/services/foo) #2000
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: pull_request_target | |
| on: pull_request_target | |
| concurrency: | |
| group: ${{ github.workflow }}--${{ github.head_ref }} # github.ref is unavailable in case of pull_request_target | |
| cancel-in-progress: true | |
| permissions: {} | |
| jobs: | |
| path-filter: | |
| uses: ./.github/workflows/wc-path-filter.yaml | |
| permissions: {} | |
| secrets: | |
| gh_app_id: ${{secrets.APP_ID}} | |
| gh_app_private_key: ${{secrets.APP_PRIVATE_KEY}} | |
| enable-auto-merge: | |
| # This job is used for main branch's branch protection rule's status check. | |
| # If all dependent jobs succeed or are skipped this job succeeds. | |
| uses: ./.github/workflows/wc-enable-auto-merge.yaml | |
| needs: | |
| - status-check | |
| permissions: {} | |
| secrets: | |
| gh_app_id: ${{secrets.APP_ID}} | |
| gh_app_private_key: ${{secrets.APP_PRIVATE_KEY}} | |
| if: | | |
| ! failure() && ! cancelled() && github.event.pull_request.user.login == 'renovate[bot]' && contains(github.event.pull_request.body, ' **Automerge**: Enabled.') | |
| # This job is used for branch protection rule | |
| # Add this job to `Status checks that are required` | |
| status-check: | |
| runs-on: ubuntu-latest | |
| needs: | |
| - conftest-verify | |
| - hide-comment | |
| - opa-fmt | |
| - renovate-config-validator | |
| - test | |
| - update-aqua-checksums | |
| if: failure() | |
| steps: | |
| - run: exit 1 | |
| conftest-verify: | |
| uses: ./.github/workflows/wc-conftest-verify.yaml | |
| needs: path-filter | |
| if: | | |
| needs.path-filter.outputs.conftest-verify == 'true' | |
| permissions: | |
| contents: read | |
| with: | |
| ref: ${{needs.path-filter.outputs.merge_commit_sha}} | |
| secrets: | |
| gh_app_id: ${{secrets.APP_ID}} | |
| gh_app_private_key: ${{secrets.APP_PRIVATE_KEY}} | |
| ghalint: | |
| uses: ./.github/workflows/wc-ghalint.yaml | |
| needs: path-filter | |
| if: | | |
| needs.path-filter.outputs.ghalint == 'true' | |
| permissions: | |
| contents: read | |
| with: | |
| ref: ${{needs.path-filter.outputs.merge_commit_sha}} | |
| secrets: | |
| gh_app_id: ${{secrets.APP_ID}} | |
| gh_app_private_key: ${{secrets.APP_PRIVATE_KEY}} | |
| hide-comment: | |
| uses: ./.github/workflows/wc-hide-comment.yaml | |
| needs: path-filter | |
| permissions: | |
| contents: read | |
| with: | |
| ref: ${{needs.path-filter.outputs.merge_commit_sha}} | |
| secrets: | |
| gh_app_id: ${{secrets.APP_ID}} | |
| gh_app_private_key: ${{secrets.APP_PRIVATE_KEY}} | |
| opa-fmt: | |
| uses: ./.github/workflows/wc-opa-fmt.yaml | |
| needs: path-filter | |
| if: | | |
| needs.path-filter.outputs.opa-fmt == 'true' | |
| permissions: | |
| contents: read | |
| pull-requests: write | |
| with: | |
| ref: ${{needs.path-filter.outputs.merge_commit_sha}} | |
| secrets: | |
| gh_app_id: ${{secrets.APP_ID}} | |
| gh_app_private_key: ${{secrets.APP_PRIVATE_KEY}} | |
| renovate-config-validator: | |
| uses: ./.github/workflows/wc-renovate-config-validator.yaml | |
| needs: path-filter | |
| if: needs.path-filter.outputs.renovate-config-validator == 'true' | |
| with: | |
| ref: ${{needs.path-filter.outputs.merge_commit_sha}} | |
| permissions: | |
| contents: read | |
| test: | |
| uses: ./.github/workflows/wc-test.yaml | |
| needs: path-filter | |
| permissions: | |
| id-token: write | |
| contents: read | |
| with: | |
| ref: ${{needs.path-filter.outputs.merge_commit_sha}} | |
| secrets: | |
| gh_app_id: ${{secrets.APP_ID}} | |
| gh_app_private_key: ${{secrets.APP_PRIVATE_KEY}} | |
| terraform_private_module_ssh_key: ${{secrets.TERRAFORM_PRIVATE_MODULE_SSH_KEY}} | |
| secrets: ${{toJSON(secrets)}} | |
| update-aqua-checksums: | |
| uses: ./.github/workflows/wc-update-aqua-checksums.yaml | |
| needs: path-filter | |
| if: needs.path-filter.outputs.update-aqua-checksums == 'true' | |
| permissions: | |
| contents: read | |
| with: | |
| ref: ${{needs.path-filter.outputs.merge_commit_sha}} | |
| secrets: | |
| gh_app_id: ${{secrets.APP_ID}} | |
| gh_app_private_key: ${{secrets.APP_PRIVATE_KEY}} |