infrastructure-commit.yaml

name: Terraform commit pipeline
run-name: ${{ github.actor }} made a commit to infrastructure

on:
  push:
    paths: ['infrastructure/**' ]
    branches: [ 'ftr/*' ]

jobs:
  format-code:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repo
        uses: actions/checkout@v4
      - name: Check Terraform formatting
        uses: dflook/terraform-fmt-check@v1
        with:
          path: "./infrastructure/"
  
  lint-code:
    runs-on: ubuntu-latest
    needs: format-code
    steps:
      - name: Checkout repo
        uses: actions/checkout@v4
      - name: Check linting of Terraform code
        uses: devops-infra/action-tflint@v0.3
        with:
          dir_filter: infrastructure/

  validate:
    runs-on: ubuntu-latest
    needs: lint-code
    steps:
      - name: Checkout repo
        uses: actions/checkout@v4
      - name: Validate Terraform
        uses: dflook/terraform-validate@v1
        with:
          path: "./infrastructure/"

  checkov-scan:
    runs-on: ubuntu-latest
    needs: validate
    steps:
      - name: Checkout repo
        uses: actions/checkout@v4
      - name: Check infrastructure code with Checkov
        uses: bridgecrewio/checkov-action@v12
        with:
          check: 'HIGH, CRITICAL'
          directory: infrastructure/
          output_format: cli
          output_file_path: console