check-and-plan.yml

name: Check and Plan
on:
  push:

jobs:
  format:
    name: tf format
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Set up Terraform
        uses: hashicorp/setup-terraform@v3
        with:
          terraform_version: 1.9.1

      - name: Check formatting of all terraform files
        run: terraform fmt -check -recursive

  validate:
    name: tf validate
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Set up Terraform
        uses: hashicorp/setup-terraform@v3
        with:
          terraform_version: 1.9.1

      - name: Terraform init integration folder
        working-directory: terraform/integration
        run: terraform init -backend=false

      - name: Terraform validate integration folder
        working-directory: terraform/integration
        run: terraform validate

      - name: Terraform init integration backend folder
        working-directory: terraform/integration/backend
        run: terraform init -backend=false

      - name: Terraform validate integration backend folder
        working-directory: terraform/integration/backend
        run: terraform validate

  tfsec:
    name: tfsec
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Run tfsec
        uses: aquasecurity/tfsec-action@v1.0.3
        with:
          working_directory: terraform/
          version: v1.28.11