Merge pull request #6 from clouddrove/feature/internal381

ci: add tfsec workflow

.github/workflows/changelog.yaml → .github/workflows/changelog.yml

@@ -1,14 +1,13 @@
 name: changelog
 permissions: write-all
-
 on:
   push:
     tags:
       - "*"
-  # Allows you to run this workflow manually from the Actions tab
   workflow_dispatch:
 jobs:
-  call-workflow-changelog:
+  changelog:
     uses: clouddrove/github-shared-workflows/.github/workflows/changelog.yml@master
+    secrets: inherit
     with:
       branch: 'master'

.github/workflows/static-checks.yml

@@ -49,6 +49,7 @@ jobs:
       - name: tflint
         uses: reviewdog/action-tflint@master
         with:
+          tflint_version: v0.29.0
           github_token: ${{ secrets.GITHUB_TOKEN }}
           working_directory: ${{ matrix.directory }}
           fail_on_error: 'true'

.github/workflows/tfsec.yml

@@ -0,0 +1,11 @@
+name: tfsec
+permissions: write-all
+on:
+  pull_request:
+  workflow_dispatch:
+jobs:
+  tfsec:
+    uses: clouddrove/github-shared-workflows/.github/workflows/tfsec.yml@master
+    secrets: inherit
+    with:
+      working_directory: '.'

_example/complete/main.tf

@@ -13,12 +13,12 @@ module "resource_group" {
 }
 
 module "logic-app" {
-  source = "../../"
+  source = "clouddrove/logic-app/azure"
 
   enabled             = true
   name                = "logic-app"
   environment         = "test"
   label_order         = ["name", "environment"]
   location            = module.resource_group.resource_group_location
   resource_group_name = module.resource_group.resource_group_name
-}
+}