Merge pull request #37 from mattmoor/pin-and-update-providers

.github/dependabot.yaml

@@ -6,3 +6,7 @@ updates:
     schedule:
       interval: "daily"
     open-pull-requests-limit: 10
+  - package-ecosystem: terraform
+    directory: "/tflib/publisher"
+    schedule:
+      interval: "daily"

tflib/publisher/main.tf

@@ -1,25 +1,38 @@
+terraform {
+  required_providers {
+    cosign = {
+      source  = "chainguard-dev/cosign"
+      version = "0.0.6"
+    }
+    apko = {
+      source  = "chainguard-dev/apko"
+      version = "0.8.9"
+    }
+  }
+}
+
 variable "target_repository" {}
 
 variable "config" {}
 
 variable "extra_packages" {
-  type        = list(string)
-  default     = ["wolfi-baselayout"]
+  type    = list(string)
+  default = ["wolfi-baselayout"]
 }
 
 module "this" {
   source  = "chainguard-dev/apko/publisher"
-  version = "0.0.4"
+  version = "0.0.6"
 
   target_repository = var.target_repository
   config            = var.config
   extra_packages    = var.extra_packages
 }
 
 output "image_ref" {
-    value = module.this.image_ref
+  value = module.this.image_ref
 }
 
 output "config" {
-    value = module.this.config
-}
+  value = module.this.config
+}