Update docs and fix tfsec-comment (#2)

* docs: add disclaimer

* feat: add a condition to run tfsec-comment

Author: edsoncelio

.github/workflows/terraform.yml

@@ -30,7 +30,6 @@ jobs:
           terraform_version: ${{ inputs.tf_version }}
           terraform_wrapper: ${{ inputs.tf_wrapper }}
 
-
       - name: Terraform format
         id: fmt
         run: terraform fmt -check
@@ -44,6 +43,7 @@ jobs:
         run: terraform validate -no-color
 
       - name: TFSec validation
+        if: ${{ github.event.pull_request.base.ref == 'main' }}
         uses: aquasecurity/tfsec-pr-commenter-action@main
         with:
           github_token: ${{ secrets.token }}

README.md

@@ -5,6 +5,7 @@ Terraform workflow to be reused in your project.
 * https://github.com/marketplace/actions/hashicorp-setup-terraform
 * https://github.com/marketplace/actions/run-tfsec-pr-commenter
 
+**Disclaimer:** The tfsec commenter will run ONLY in pull requests
 
 ## Inputs
 * `tf_version`: Terraform version (type: string, default: 1.0.0)]
@@ -29,4 +30,4 @@ jobs:
 TODO
 
 ## License
-Distributed under the MIT License. See `LICENSE` for more information.
+Distributed under the MIT License. See `LICENSE` for more information.