Skip to content

Update Config Rules #27

Update Config Rules

Update Config Rules #27

Workflow file for this run

name: Update Config Rules
on:
schedule:
- cron: '0 0 1,15 * *'
workflow_dispatch:
jobs:
update-rules:
name: Update Rules
runs-on: ubuntu-latest
outputs:
any_changed: ${{ steps.changed-files.outputs.any_changed }}
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Update rules
id: update-rules
run: |
cd scripts
pip install -r requirements.txt
python index.py update-config-rules
python index.py update-rule-packs
- name: Get changed files
id: changed-files
uses: tj-actions/changed-files@v44
with:
files: |
"*.tf"
"files/*"
- name: List all changed files
run: echo '${{ steps.changed-files.outputs.all_changed_files }}'
- uses: actions/cache@v4
name: Cache plugin dir
with:
path: ~/.tflint.d/plugins
key: tflint-${{ hashFiles('.tflint.hcl') }}
- uses: terraform-linters/setup-tflint@v4
name: Setup TFLint
with:
tflint_version: v0.50.3
- name: Show version
run: tflint --version
- name: Init TFLint
run: tflint --init
- name: Run TFLint
run: tflint --disable-rule=terraform_required_version
- uses: hashicorp/setup-terraform@v3
with:
terraform_version: 1.6.0
- name: Terraform Format
run: terraform fmt --recursive .
- name: Create Pull Request
uses: peter-evans/create-pull-request@v6
with:
token: ${{ secrets.GITHUB_TOKEN }}
base: main
branch: auto-update-aws-config-rules
add-paths: |
managed_rules_*.tf
files/*
commit-message: Automatic updates to AWS managed Config Rules
delete-branch: true
title: '[Auto] Update AWS Config Rules'
body: |
Update the list of AWS managed Config Rules using the [latest documentation](https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html).
assignees: bensonce
reviewers: bensonce,duraikkannuv2