tf automation and github secrets #5

	name: "Terraform"

	on:
	push:
	branches: ["main"]
	pull_request:

	permissions:
	contents: read

	jobs:
	terraform:
	name: "Terraform"
	runs-on: ubuntu-latest
	environment: github

	# Use the Bash shell regardless whether the GitHub Actions runner is ubuntu-latest, macos-latest, or windows-latest
	defaults:
	run:
	shell: bash

	steps:
	# Checkout the repository to the GitHub Actions runner
	- name: Checkout
	uses: actions/checkout@v4

	# Install the latest version of Terraform CLI and configure the Terraform CLI configuration file with a Terraform Cloud user API token
	- name: Setup Terraform
	uses: hashicorp/setup-terraform@v3
	with:
	cli_config_credentials_token: ${{ secrets.TF_API_TOKEN }}

	- name: Terraform Init, Format, and Plan
	run: make ci
	working-directory: apps/github-as-code
	env:
	TF_IN_AUTOMATION: "true"
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

	# On push to "main", build or change infrastructure according to Terraform configuration files
	# Note: It is recommended to set up a required "strict" status check in your repository for "Terraform Cloud". See the documentation on "strict" required status checks for more information: https://help.github.com/en/github/administering-a-repository/types-of-required-status-checks
	- name: Terraform Apply
	if: github.ref == 'refs/heads/"main"' && github.event_name == 'push'
	run: make cd
	working-directory: apps/github-as-code
	env:
	TF_IN_AUTOMATION: "true"
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Provide feedback