Releases: DevSecTop/TF-via-PR
Releases · DevSecTop/TF-via-PR
v12.1.0
Added
- #363 Support for
init
command input for checks and outputs only. - #363 More workflow examples:
- Run on
pull_request
(plan) andpush
(apply) events with conditional job stages based on plan file (thank you, @silnels-greenlane). - Run on
pull_request
(plan) andpush
(apply) events with fmt/validate checks and TFLint (thank you, @chris3ware).
- Run on
Improved
- #362 Documentation:
- List all supported repeatable arguments:
arg-var
,arg-backend-config
,arg-replace
andarg-target
, using commas to separate multiple values (e.g.,arg-var: key1=value1,key2=value2
). - More line breaks for ease of legibility.
- List all supported repeatable arguments:
uses: devsectop/tf-via-pr@b3d1122eb0c8ba37a4f76280c14d7e7f6d3a81be # v12.1.0
v12
Update major version tag
v12.0.8
Fixed
- #360 Early-passing of variables depends on
tofu
(with its early-static-evaluation) orterraform
tool usage (thank you, @joe-dematteo).
uses: devsectop/tf-via-pr@d83a2be572df0559c8a7adca1a9085b496925f48 # v12.0.8
v12.0.7
Fixed
uses: devsectop/tf-via-pr@bbfe2549cfbff6a4ce05755c4bd76a1a22f4fd9e # v12.0.7
v12.0.6
Added
- #357
show-args
parameter enables rendering of CLI arguments in the PR comment's header which wouldn't normally be part of the last command (thank you, @garysassano).
E.g., The default value ofworkspace
ensures thatarg-workspace
input is always rendered, even forplan
orapply
.- This complements the existing
hide-args
parameter for the inverse function, and overrides in case of conflict. - Both
show-args
andhide-args
accept comma-separated list of inputs, such as "detailed-exitcode,lock,out".
- This complements the existing
Fixed
- #356 Reference workflow job ID from multiple chained matrices (thank you, @silnels-greenlane).
uses: devsectop/tf-via-pr@74126c383c6bedd3b31a05cd7b1ef98bf9e40351 # v12.0.6
v12.0.5
Note
While this is a patch release, existing PRs should be updated for consistent behaviour with plan files.
Added
- Pass in multiple comma-separated
-backend-config
values (thank you, @fulgas) (#352).
E.g.,arg-backend-config: encrypt=true,bucket="bucket-name",dynamodb_table="table-name"
.- This is in addition to existing support for
-var
,-target
, and-replace
comma-separated values.
- This is in addition to existing support for
Improved
- Portion of the plan file artifact name is hashed with MD5 for concise, fixed-length string (#352).
- This is to address GitHub's 256 character limit for artifact naming.
- As a bonus, this also masks potentially sensitive values. E.g., from
arg-var
input.
- Documentation to include "To-Do" tasks (#352).
- Documentation to include
TF_CLI_ARGS
workaround (thank you, @fulgas) (#353). - Rendering of standard error (
stderr
) and standard output (stdout
) combination (#353). - Rendering of
fmt
format output with diff syntax highlighting (#353).
To-do
- Handling of inputs which contain space(s) (e.g.,
working-directory: "path to/directory"
). - Handling of comma-separated inputs which contain comma(s) (e.g.,
arg-var: token=1,2,3
)—useTF_CLI_ARGS
workaround.
uses: devsectop/tf-via-pr@a917bd222a6a780f25d2c5cd1942f6b2c2f16a7a # v12.0.5
v12.0.4
Fixed
- Remove
'
single quotes from surrounding CLI arguments—likely to fail on paths which include whitespace (thank you, @Setthawut-Peace) (#349). - Render plan output when
var-file
orvar
is supplied (#349). - Overzealous
hide-args
input—for example, "var" used to hide "var-file" as well (#349). - Reorder exit code output order to match order of command operations (#348).
uses: devsectop/tf-via-pr@8bb3a5840d216ca8a78086b47c29debf26e93824 # v12.0.4
v12.0.3
Improved
- Consistent naming within README documentation (thanks to @garysassano).
Fixed
- Interpolation of
arg-workspace
input within plan file artifact name (thanks to @garysassano).
v12.0.2
Fixed
- Prioritize standard error
stderr
over standard outputstdout
, if present. - Handling extremely large outputs gracefully when it exceeds GitHub's character limits.
- Explicit
unzip
package requirement. - Expand argument parameters for legibility.
v12.0.1
Added
- Count of diff lines in the output.
Improved
- Reorder above-the-fold content in the README.
- Consistent use of arguments throughout workflow examples.
- Use
-json
fordiff
command comparison of plan files withplan-parity
enabled.- Reveal
diff
command output duringplan-parity
comparison.
- Reveal
- Append '…' ellipsis to truncated plan or diff outputs if exceeding character limit.
Fixed
- Handling of plan files which exceed GitHub's character limit.
- Include
stderr
within console output of the workflow run log. - Exclude
-detailed-exitcode
argument from plan command duringplan-parity
comparison.