Feature/automerge

.github/workflows/automerge.yml

@@ -10,46 +10,57 @@ jobs:
   static-checks:
     name: Check the status of static checks 
     runs-on: ubuntu-latest
-    if: github.actor == 'dependabot[bot]'   
+    strategy:
+      matrix:
+        tf-checks: ["tflint-check / tflint", "tfsec / tfsec sarif report"]    
+    # if: github.actor == 'dependabot[bot]'   
     steps:
-      - name: Wait for "tflint" to succeed
+      # - name: Wait for "tfsec" to succeed
+      #   uses: lewagon/[email protected]
+      #   with:
+      #     ref: ${{ github.event.pull_request.head.sha }}
+      #     check-name: 'tflint-check / tflint'
+      #     repo-token: ${{ secrets.GITHUB }}
+      #     wait-interval: 30
+
+      - name: Wait for "${{ matrix.tf-checks }}" to succeed
         uses: lewagon/[email protected]
         with:
           ref: ${{ github.event.pull_request.head.sha }}
-          check-name: 'tf-lint / tflint'
+          check-name: ${{ matrix.tf-checks }}
           repo-token: ${{ secrets.GITHUB }}
           wait-interval: 30
 
-  autoapprove:
-    name: Auto Approve a PR by dependabot
-    needs: static-checks
-    runs-on: ubuntu-latest
-    if: github.actor == 'dependabot[bot]'
-    steps:
-      - name: Approve a PR for Github Bot
-        run: gh pr review --approve "$PR_URL"
-        env:
-          PR_URL: ${{github.event.pull_request.html_url}}
-          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
+  # autoapprove:
+  #   name: Auto Approve a PR by dependabot
+  #   needs: static-checks
+  #   runs-on: ubuntu-latest
+  #   if: github.actor == 'dependabot[bot]'
+  #   steps:
+  #     - name: Approve a PR for Github Bot
+  #       run: gh pr review --approve "$PR_URL"
+  #       env:
+  #         PR_URL: ${{github.event.pull_request.html_url}}
+  #         GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
 
-      - name: Approve a PR for Anmol nagpal
-        run: gh pr review --approve "$PR_URL"
-        env:
-          PR_URL: ${{github.event.pull_request.html_url}}
-          GITHUB_TOKEN: ${{secrets.GITHUB}}
+  #     - name: Approve a PR for Anmol nagpal
+  #       run: gh pr review --approve "$PR_URL"
+  #       env:
+  #         PR_URL: ${{github.event.pull_request.html_url}}
+  #         GITHUB_TOKEN: ${{secrets.GITHUB}}
 
-  automerge:
-    runs-on: ubuntu-latest
-    needs: autoapprove
-    steps:
-      - id: automerge
-        name: automerge
-        uses: pascalgn/[email protected]
-        if: github.event_name == 'pull_request' && github.event.pull_request.draft == false
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB }}
-          MERGE_FILTER_AUTHOR: 'dependabot[bot]'
-          MERGE_METHOD: "merge"
-          MERGE_DELETE_BRANCH: "true"
-          MERGE_LABELS: "dependencies"
-          MERGE_REQUIRED_APPROVALS: ""
+  # automerge:
+  #   runs-on: ubuntu-latest
+  #   needs: autoapprove
+  #   steps:
+  #     - id: automerge
+  #       name: automerge
+  #       uses: pascalgn/[email protected]
+  #       if: github.event_name == 'pull_request' && github.event.pull_request.draft == false
+  #       env:
+  #         GITHUB_TOKEN: ${{ secrets.GITHUB }}
+  #         MERGE_FILTER_AUTHOR: 'dependabot[bot]'
+  #         MERGE_METHOD: "merge"
+  #         MERGE_DELETE_BRANCH: "true"
+  #         MERGE_LABELS: "dependencies"
+  #         MERGE_REQUIRED_APPROVALS: ""

.github/workflows/tf-checks.yml

@@ -34,6 +34,6 @@ jobs:
     with:
       working_directory: './_example/s3-replication/'
   tf-checks-website-s3-example:
-    uses: clouddrove/github-shared-workflows/.github/workflows/tf-checks.yml@1.0.7
+    uses: clouddrove/github-shared-workflows/.github/workflows/tf-checks.yml@feat/tfcheckUpdate
     with:
       working_directory: './_example/website-s3/'

.github/workflows/tflint.yml

@@ -6,6 +6,7 @@ on:
   workflow_dispatch:
 jobs:
   tf-lint:
+    name: tflint-check
     uses: clouddrove/github-shared-workflows/.github/workflows/[email protected]
     secrets:
       GITHUB: ${{ secrets.GITHUB }}