chore: update pipelines (#14)

* chore: update pipelines

* terraform-docs: automated action

---------

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

.github/workflows/code-testing.yml

@@ -6,6 +6,7 @@ on:
     - "main"
   pull_request:
 
+# Sets the permissions granted to the `GITHUB_TOKEN` for the actions in this job.
 permissions:
   contents: read
 
@@ -25,8 +26,6 @@ jobs:
     # Install the latest version of Terraform CLI and configure the Terraform CLI configuration file with a Terraform Cloud user API token
     - name: Setup Terraform
       uses: hashicorp/setup-terraform@v3
-      # with:
-      #   cli_config_credentials_token: ${{ secrets.TF_API_TOKEN }}
 
     # Initialize a new or existing Terraform working directory by creating initial files, loading any remote state, downloading modules, etc.
     - name: Terraform Init
@@ -36,37 +35,14 @@ jobs:
     - name: Terraform Format
       run: terraform fmt -check
 
-    # Generates an execution plan for Terraform
-    # - name: Terraform Plan
-    #   run: terraform plan -input=false
-
-    #   On push to "main", build or change infrastructure according to Terraform configuration files
-    #   Note: It is recommended to set up a required "strict" status check in your repository for "Terraform Cloud". See the documentation on "strict" required status checks for more information: https://help.github.com/en/github/administering-a-repository/types-of-required-status-checks
-    # - name: Terraform Apply
-    #   if: github.ref == 'refs/heads/"main"' && github.event_name == 'push'
-    #   run: terraform apply -auto-approve -input=false
-
-  checkov:
-    name: 'Checkov'
+  tfsec:
+    name: tfsec
     runs-on: ubuntu-latest
 
-    # Use the Bash shell regardless whether the GitHub Actions runner is ubuntu-latest, macos-latest, or windows-latest
-    defaults:
-      run:
-        shell: bash
-
     steps:
-    # Checkout the repository to the GitHub Actions runner
-    - name: Checkout
-      uses: actions/checkout@v4
-
-    - name: Run Checkov action
-      id: checkov
-      uses: bridgecrewio/checkov-action@master
-      with:
-        quiet: true 
-        framework: terraform 
-        output_format: sarif
-        download_external_modules: true 
-        log_level: WARNING
-        container_user: 1000
+      - name: Clone repo
+        uses: actions/checkout@master
+      - name: tfsec
+        uses: aquasecurity/[email protected]
+        with:
+          soft_fail: false

.github/workflows/genarate-docs.yml

@@ -5,22 +5,34 @@ on:
     branches-ignore:
       - main
 
+# Sets the permissions granted to the `GITHUB_TOKEN` for the actions in this job.
+permissions:
+  contents: write
+
 jobs:
   build:
     name: Documentations
     runs-on: ubuntu-latest
+
     if: "!contains(github.event.head_commit.message, '[ci skip]')"
     steps:
+
       - name: Checkout
         uses: actions/checkout@v4
         with:
           ref: ${{ github.event.pull_request.head.ref }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
+          token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Set up Git user
+        run: |
+          git config --global user.name 'GitHub Actions'
+          git config --global user.email '[email protected]'
 
       - name: Regenerate README.md
         uses: terraform-docs/gh-actions@main
         with:
           working-dir: .
           output-file: README.md
           config-file: .terraform-docs.yml
-          git-push: true
+          git-push: true

.github/workflows/release.yml

@@ -1,8 +1,14 @@
 name: 'Create release'
+
 on:
   push:
     branches:
       - main
+
+permissions:
+  contents: write
+  actions: write
+
 jobs:
   build:
     runs-on: ubuntu-latest

README.md

@@ -37,7 +37,7 @@ No modules.
 |------|-------------|------|:--------:|
 | azure\_location | The Azure Region where the Resource Group should exist. Changing this forces a new Resource Group to be created. | `string` | yes |
 | resource\_group\_name | The Name which should be used for this Resource Group. Changing this forces a new Resource Group to be created. | `string` | yes |
-| resource\_group\_tags | A mapping of tags which should be assigned to the Resource Group. | `map(any)` | no |
+| resource\_group\_tags | A mapping of tags which should be assigned to the Resource Group. | `map(any)` | no |  
 
 ## Outputs