Fails to Update Pull Request with Terraform Plan Output (Manually executed)

[gowgopal83]

I'm using the op5dev/tf-via-pr@v13 action in a GitHub Actions workflow to run Terraform plans and post the output to pull requests (PRs). The workflow runs successfully for Terraform plans, but it fails to update the PR with the plan output when triggered manually via workflow_dispatch. The error message is: [insert exact error message here]. This issue occurs consistently when using custom tf_directory and tf_workspace inputs. Any suggestions?

Workflow details

name: Terraform Plan on PR
on:
  pull_request:
    types: [opened, synchronize]
  workflow_dispatch:
    inputs:
      #  checkov:skip=CKV_GHA_7
      #  reason="This workflow manages team members by design and inputs are validated strictly.
      tf_directory:
        description: "Directory of the terraform code to plan"
        required: true
        default: "terraform/production"
        type: string
      tf_workspace:
        description: "Terraform workspace to use"
        required: true
        default: "default"
        type: string

permissions:
  actions: read
  checks: write
  contents: read
  pull-requests: write
  id-token: write

jobs:
  terraform_plan_on_pr:
    runs-on: dcloud-runner
    env:
      AWS_REGION: ${{ vars.DCLOUD_MANAGE_AWS_REGION }}
      TERRAFORM_IAM_ROLE_ARN: ${{ vars.DCLOUD_MANAGE_TF_IAM_ASSUME_ROLE }}
      GITHUB_APP_CREDS_SECRET_ARN: ${{ vars.DCLOUD_MANAGE_GH_RUNNER_SECRET_ARN }} # GH Actions org/repo vars

    steps:
      - name: Checkout PR code
        uses: actions/checkout@v4

      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          role-to-assume: ${{ env.TERRAFORM_IAM_ROLE_ARN }}
          role-session-name: "gh-tf-plan-pr-${{ github.run_id }}"
          aws-region: ${{ env.AWS_REGION }}

      - name: Generate GitHub App Token (for PR commenting and TF GitHub Provider)
        id: generate_app_token
        uses: actions/create-github-app-token@v2.0.6
        with:
          app-id: ${{ secrets.GH_RUNNER_IAC_APP_ID }}
          private-key: ${{ secrets.GH_RUNNER_APP_PEM }}
          owner: cisco-dcloud
          repositories: dcloud-vsphere-infra,tf_vsphere_vm

      - name: Configure Git for Private Modules
        run: |
          GHTOKEN="${{ steps.generate_app_token.outputs.token }}"
          git config --global \
          url."https://x-access-token:'${GHTOKEN}'@github.com/".insteadOf "https://github.com/"

      - name: Set Terraform Directory and Workspace
        id: set-vars
        run: |
          if [ "${{ github.event_name }}" == "workflow_dispatch" ]; then
            echo "Workflow triggered manually. Using inputs."
            echo "TF_DIR=${{ inputs.tf_directory }}" >> "$GITHUB_OUTPUT"
            echo "TF_WORKSPACE=${{ inputs.tf_workspace }}" >> "$GITHUB_OUTPUT"
          else
            echo "Workflow triggered by a Pull Request. Using defaults."
            echo "TF_DIR=terraform/production" >> "$GITHUB_OUTPUT"
            echo "TF_WORKSPACE=default" >> "$GITHUB_OUTPUT"
          fi

      - name: Find Pull Request Number
        id: find-pr
        env:
          GITHUB_TOKEN: ${{ github.token }}
        run: |
          if [ "${{ github.event_name }}" == "pull_request" ]; then
            PR_NUMBER=${{ github.event.pull_request.number }}
          else
            BRANCH_NAME="${{ github.ref_name }}"
            PR_NUMBER=$(gh pr list --head "$BRANCH_NAME" --json number --jq '.[0].number')
          fi
          echo "Found PR number: #${PR_NUMBER:-"none"}"
          echo "pr_number=$PR_NUMBER" >> "$GITHUB_OUTPUT"

      - name: Setup Terraform
        uses: hashicorp/setup-terraform@v3
        with:
          terraform_version: "1.10.5"

      - name: Provision TF
        uses: op5dev/tf-via-pr@v13
        with:
          token: ${{ steps.generate_app_token.outputs.token }}
          command: ${{ github.event_name == 'push' && 'apply' || 'plan' }}
          # arg-lock: ${{ github.event_name == 'push' }}
          arg-backend-config: manage-account.ini
          arg-workspace: ${{ steps.set-vars.outputs.TF_WORKSPACE }}
          working-directory: ${{ steps.set-vars.outputs.TF_DIR }}
          comment-pr: on-change

Steps to Reproduce

• Trigger the workflow via workflow_dispatch with inputs tf_directory=terraform/production and tf_workspace=default.
• The Terraform plan executes successfully in the specified directory and workspace.
• The tf-via-pr action attempts to post the plan output to the PR using comment-pr: on-change.
• The PR update fails with the error: [insert exact error message].

Expected Behavior

• The tf-via-pr action should post the Terraform plan output as a comment or check run on the associated PR.

Actual Behavior

The PR is not updated, and the workflow logs show: [insert error message or describe behavior, e.g., "failed to update check run" or "no PR comment posted"].

Run # TF show.
  # TF show.
  terraform -chdir=dcloud_core show tfplan > tf.console.txt
  
  # Diff of changes.
  # Filter lines starting with "  # " and save to tf.diff.txt, then prepend diff-specific symbols based on specific keywords.
  grep '^  # ' tf.console.txt | sed \
    -e 's/^  # \(.* be created\)/+ \1/' \
    -e 's/^  # \(.* be destroyed\)/- \1/' \
    -e 's/^  # \(.* be updated\|.* be replaced\)/! \1/' \
    -e 's/^  # \(.* be read\)/~ \1/' \
    -e 's/^  # \(.*\)/# \1/' > tf.diff.txt || true
  shell: /usr/bin/bash --noprofile --norc -e -o pipefail {0}
  env:
    AWS_REGION: us-east-1
    TERRAFORM_IAM_ROLE_ARN: arn:aws:iam::126237642437:role/tf_gh_actions_oidc_role
    GITHUB_APP_CREDS_SECRET_ARN: arn:aws:secretsmanager:us-east-1:126237642437:secret:/manage/default/gh_iac_runner_keys-WyKXsK
    AWS_DEFAULT_REGION: us-east-1
    AWS_ACCESS_KEY_ID: ***
    AWS_SECRET_ACCESS_KEY: ***
    AWS_SESSION_TOKEN: ***
    TERRAFORM_CLI_PATH: /home/runner/work/_temp/203f5c35-04eb-4cde-89d0-0608ef725e7c
    GH_API: X-GitHub-Api-Version:2022-11-28
    GH_TOKEN: ***
    TF_CLI_ARGS: -no-color
    TF_IN_AUTOMATION: true
    TF_INPUT: false
    TF_WORKSPACE: sng-dev
Run actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
  with:
    name: terraform--f965ee3c92a835683729bfa68b135048.tfplan
    path: dcloud_core/tfplan
    overwrite: true
    if-no-files-found: warn
    compression-level: 6
    include-hidden-files: false
  env:
    AWS_REGION: us-east-1
    TERRAFORM_IAM_ROLE_ARN: arn:aws:iam::126237642437:role/tf_gh_actions_oidc_role
    GITHUB_APP_CREDS_SECRET_ARN: arn:aws:secretsmanager:us-east-1:126237642437:secret:/manage/default/gh_iac_runner_keys-WyKXsK
    AWS_DEFAULT_REGION: us-east-1
    AWS_ACCESS_KEY_ID: ***
    AWS_SECRET_ACCESS_KEY: ***
    AWS_SESSION_TOKEN: ***
    TERRAFORM_CLI_PATH: /home/runner/work/_temp/203f5c35-04eb-4cde-89d0-0608ef725e7c
    GH_API: X-GitHub-Api-Version:2022-11-28
    GH_TOKEN: ***
    TF_CLI_ARGS: -no-color
    TF_IN_AUTOMATION: true
    TF_INPUT: false
    TF_WORKSPACE: sng-dev
With the provided path, there will be 1 file uploaded
Artifact name is valid!
Root directory input is valid!
Beginning upload of artifact content to blob storage
Uploaded bytes 36091
Finished uploading artifact content to blob storage!
SHA256 digest of uploaded artifact zip is 2909a528f8818f37cb1b6cc6ea5c1a1db97f2d3386755993e2aa176cb1a9b747
Finalizing artifact upload
Artifact terraform--f965ee3c92a835683729bfa68b135048.tfplan.zip successfully finalized. Artifact ID 3465434429
Artifact terraform--f965ee3c92a835683729bfa68b135048.tfplan has been successfully uploaded! Final size is 36091 bytes. Artifact ID is 3465434429
Artifact download URL: https://github.com/cisco-dcloud/dcloud-vsphere-infra/actions/runs/16072504626/artifacts/3465434429
Run # Post output.
  # Post output.
  # Parse the "tf.command.txt" file.
  command=$(cat tf.command.txt)
  
  # Remove each comma-delemited "hide-args" argument from the command.
  IFS=',' read -ra hide_args <<< "detailed-exitcode,parallelism,lock,out,var="
  for arg in "${hide_args[@]}"; do
    command=$(echo "$command" | grep --invert-match "^ -${arg}" || true)
  done
  
  # Conversely, show each comma-delemited "show-args" argument in the command.
  command_append=""
  IFS=',' read -ra show_args <<< "workspace"
  for arg in "${show_args[@]}"; do
    command_append+=$(echo " -workspace=sng-dev -backend-config=manage-account.ini -check -detailed-exitcode -diff -recursive" | sed 's/ -/\n -/g' | grep "^ -${arg}" || true)
  done
  
  # Consolidate 'command', taking both "hide-args" and "show-args" into account.
  command=$(echo "$command" | tr -d '\n')$command_append
  echo "command=$command" >> "$GITHUB_OUTPUT"
  
  # Parse the "tf.console.txt" file, truncated for character limit.
  console=$(head --bytes=42000 tf.console.txt)
  if [[ ${#console} -eq 42000 ]]; then console="${console}"$'\n…'; fi
  echo "result<<EORESULTTFVIAPR"$'\n'"$console"$'\n'EORESULTTFVIAPR >> "$GITHUB_OUTPUT"
  
  # Parse the "tf.console.txt" file for the summary.
  summary=$(awk '/^(Error:|Plan:|Apply complete!|No changes.|Success)/ {line=$0} END {if (line) print line; else print "View output."}' tf.console.txt)
  echo "summary=$summary" >> "$GITHUB_OUTPUT"
  
  # If "steps.format.outcome" failed, set syntax highlighting to "diff", otherwise set it to "hcl".
  syntax="hcl"
  if [[ "skipped" == "failure" ]]; then syntax="diff"; fi
  
  # Add summary to the job status.
  check_run=$(gh api /repos/cisco-dcloud/dcloud-vsphere-infra/check-runs/45360128229 --header "$GH_API" --method PATCH --field "output[title]=${summary}" --field "output[summary]=${summary}")
  
  # From "check_run", echo "html_url".
  check_url=$(echo "$check_run" | jq --raw-output '.html_url')
  echo "check_id=$(echo "$check_run" | jq --raw-output '.id')" >> "$GITHUB_OUTPUT"
  run_url=$(echo ${check_url}#step:9:1)
  echo "run_url=$run_url" >> "$GITHUB_OUTPUT"
  
  # If "tf.diff.txt" exists, display it within a "diff" block, truncated for character limit.
  if [[ -s tf.diff.txt ]]; then
    # Get count of lines in "tf.diff.txt" which do not start with "# ".
    diff_count=$(grep --invert-match '^# ' tf.diff.txt | wc --lines)
    if [[ $diff_count -eq 1 ]]; then diff_change="change"; else diff_change="changes"; fi
  
    # Parse diff of changes, truncated for character limit.
    diff_truncated=$(head --bytes=24000 tf.diff.txt)
    if [[ ${#diff_truncated} -eq 24000 ]]; then diff_truncated="${diff_truncated}"$'\n…'; fi
    echo "diff<<EODIFFTFVIAPR"$'\n'"$diff_truncated"$'\n'EODIFFTFVIAPR >> "$GITHUB_OUTPUT"
  
    diff="
  <details><summary>Diff of ${diff_count} ${diff_change}.</summary>
  
  \`\`\`diff
  ${diff_truncated}
  \`\`\`
  </details>"
  else
    diff=""
  fi
  
  # Set flags for creating PR comment and tagging actor.
  create_comment=""
  tag_actor=""
  if [[ $exitcode -ne 0 ]]; then
    if [[ "on-change" == "on-change" ]]; then create_comment="true"; fi
    if [[ "always" == "on-change" ]]; then tag_actor="true"; fi
  fi
  if [[ "on-change" == "always" ]]; then create_comment="true"; fi
  if [[ "always" == "always" ]]; then tag_actor="true"; fi
  if [[ "$tag_actor" == "true" ]]; then handle="@"; else handle=""; fi
  
  # Collate body content.
  body=$(cat <<EOBODYTFVIAPR
  <!-- placeholder-1 -->
  \`\`\`fish
  ${command}
  \`\`\`
  <!-- placeholder-2 -->
  ${diff}
  <!-- placeholder-3 -->
  <details><summary>${summary}</br>
  
  <!-- placeholder-4 -->
  ###### By ${handle}gowgopal83 at  [(view log)](${run_url}).
  </summary>
  
  \`\`\`${syntax}
  ${console}
  \`\`\`
  </details>
  <!-- placeholder-5 -->
  <!-- terraform--f965ee3c92a835683729bfa68b135048.tfplan -->
  <!-- placeholder-6 -->
  EOBODYTFVIAPR
  )
  
  # Post output to job summary.
  echo "$body" >> $GITHUB_STEP_SUMMARY
  echo "comment_body<<EOCOMMENTTFVIAPR"$'\n'"$body"$'\n'EOCOMMENTTFVIAPR >> "$GITHUB_OUTPUT"
  
  # Post PR comment if configured and PR exists.
  if [[ "$create_comment" == "true" && "" != "0" ]]; then
    # Check if the PR contains a bot comment with the same identifier.
    list_comments=$(gh api /repos/cisco-dcloud/dcloud-vsphere-infra/issues//comments --header "$GH_API" --method GET --field per_page=100)
    bot_comment=$(echo "$list_comments" | jq --raw-output --arg identifier "terraform--f965ee3c92a835683729bfa68b135048.tfplan" '.[] | select(.user.type == "Bot") | select(.body | contains($identifier)) | .id' | tail -n 1)
  
    if [[ -n "$bot_comment" ]]; then
      if [[ "update" == "recreate" ]]; then
        # Delete previous comment before posting a new one.
        gh api /repos/cisco-dcloud/dcloud-vsphere-infra/issues/comments/${bot_comment} --header "$GH_API" --method DELETE
        pr_comment=$(gh api /repos/cisco-dcloud/dcloud-vsphere-infra/issues//comments --header "$GH_API" --method POST --field "body=${body}")
        echo "comment_id=$(echo "$pr_comment" | jq --raw-output '.id')" >> "$GITHUB_OUTPUT"
      elif [[ "update" == "update" ]]; then
        # Update existing comment.
        pr_comment=$(gh api /repos/cisco-dcloud/dcloud-vsphere-infra/issues/comments/${bot_comment} --header "$GH_API" --method PATCH --field "body=${body}")
        echo "comment_id=$(echo "$pr_comment" | jq --raw-output '.id')" >> "$GITHUB_OUTPUT"
      fi
    else
      # Post new comment.
      pr_comment=$(gh api /repos/cisco-dcloud/dcloud-vsphere-infra/issues//comments --header "$GH_API" --method POST --field "body=${body}")
      echo "comment_id=$(echo "$pr_comment" | jq --raw-output '.id')" >> "$GITHUB_OUTPUT"
    fi
  elif [[ "on-change" == "on-change" && "" != "0" ]]; then
    # Delete previous comment due to no changes.
    list_comments=$(gh api /repos/cisco-dcloud/dcloud-vsphere-infra/issues//comments --header "$GH_API" --method GET --field per_page=100)
    bot_comment=$(echo "$list_comments" | jq --raw-output --arg identifier "terraform--f965ee3c92a835683729bfa68b135048.tfplan" '.[] | select(.user.type == "Bot") | select(.body | contains($identifier)) | .id' | tail -n 1)
  
    if [[ -n "$bot_comment" ]]; then
      gh api /repos/cisco-dcloud/dcloud-vsphere-infra/issues/comments/${bot_comment} --header "$GH_API" --method DELETE
    fi
  fi
  
  # Optionally delete the plan file.
  if [[ "$PRESERVE_PLAN" != "true" ]]; then
    rm --force "dcloud_core/tfplan"
  fi
  
  # Clean up files.
  rm --force tf.command.txt tf.console.txt tf.diff.txt
  shell: /usr/bin/bash --noprofile --norc -e -o pipefail {0}
  env:
    AWS_REGION: us-east-1
    TERRAFORM_IAM_ROLE_ARN: arn:aws:iam::126237642437:role/tf_gh_actions_oidc_role
    GITHUB_APP_CREDS_SECRET_ARN: arn:aws:secretsmanager:us-east-1:126237642437:secret:/manage/default/gh_iac_runner_keys-WyKXsK
    AWS_DEFAULT_REGION: us-east-1
    AWS_ACCESS_KEY_ID: ***
    AWS_SECRET_ACCESS_KEY: ***
    AWS_SESSION_TOKEN: ***
    TERRAFORM_CLI_PATH: /home/runner/work/_temp/203f5c35-04eb-4cde-89d0-0608ef725e7c
    GH_API: X-GitHub-Api-Version:2022-11-28
    GH_TOKEN: ***
    TF_CLI_ARGS: -no-color
    TF_IN_AUTOMATION: true
    TF_INPUT: false
    TF_WORKSPACE: sng-dev
    exitcode: 0
    PRESERVE_PLAN: false
gh: Resource not accessible by integration (HTTP 403)
Error: Process completed with exit code 1.

[rdhar]

Thank you for sharing such a detailed breakdown at the outset, @gowgopal83! Also great to see the use of AWS's OIDC authentication as well as alternatives to GitHub Action runners, like Cisco dCloud.

As it happens, support for workflow_dispatch trigger was introduced as recently as last week so I assumed there must be a bug. As a result, I triggered a workflow_dispatch test in this repo... and found it to be successful.

I was expecting it to fail, like in your example. So reviewing the provided workflow log, the only error is, "gh: Resource not accessible by integration (HTTP 403)." Which, unfortunately, doesn't give us a lot to work with.

The other clue is that, "Artifact terraform--f965ee3c92a835683729bfa68b135048.tfplan.zip successfully finalized." This is fascinating because there should never be --. The PR number should be positioned in between the dashes, per the code, but it appears to be missing.

To continue troubleshooting, could you run the following steps to verify that the PR number is being determined successfully by your workflow when triggered by workflow_dispatch?

    steps:
      - name: Checkout PR code
        uses: actions/checkout@v4

      - name: Generate GitHub App Token (for PR commenting and TF GitHub Provider)
        id: generate_app_token
        uses: actions/create-github-app-token@v2.0.6
        with:
          app-id: ${{ secrets.GH_RUNNER_IAC_APP_ID }}
          private-key: ${{ secrets.GH_RUNNER_APP_PEM }}
          owner: cisco-dcloud
          repositories: dcloud-vsphere-infra,tf_vsphere_vm

      - name: Get PR number
        id: pr_number
        run: |
          associated_prs=$(gh api /repos/${{ github.repository }}/commits/${{ github.event.pull_request.head.sha || github.sha }}/pulls --method GET --field per_page=100)
          echo "associated_prs=$associated_prs"
          pr_number=$(echo "$associated_prs" | jq --raw-output '(.[] | select(.head.ref == env.GITHUB_REF_NAME) | .number) // .[0].number // 0')
          echo "pr_number=$pr_number"

[gowgopal83]

Hi @rdhar, thanks for checking! I was following a similar approach to retrieve the PR number, and it seems to be working fine.

Is there a way to pass the pr_number into the Provision TF step?

Just FYI: My execution was manually triggered by providing the working_directory and tf_workspace.

Code:

      - name: Find Pull Request Number
        id: find-pr
        env:
          GITHUB_TOKEN: ${{ github.token }}
        run: |
          if [ "${{ github.event_name }}" == "pull_request" ]; then
            PR_NUMBER=${{ github.event.pull_request.number }}
          else
            BRANCH_NAME="${{ github.ref_name }}"
            PR_NUMBER=$(gh pr list --head "$BRANCH_NAME" --json number --jq '.[0].number')
          fi
          echo "Found PR number: #${PR_NUMBER:-"none"}"

Output:

Run if [ "workflow_dispatch" == "pull_request" ]; then
  if [ "workflow_dispatch" == "pull_request" ]; then
    PR_NUMBER=
  else
    BRANCH_NAME="709/dcloud_core_refactor"
    PR_NUMBER=$(gh pr list --head "$BRANCH_NAME" --json number --jq '.[0].number')
  fi
  echo "Found PR number: #${PR_NUMBER:-"none"}"
  echo "pr_number=$PR_NUMBER" >> "$GITHUB_OUTPUT"
  shell: /usr/bin/bash -e {0}
  env:
    AWS_REGION: us-east-1
    TERRAFORM_IAM_ROLE_ARN: arn:aws:iam::126237642437:role/tf_gh_actions_oidc_role
    GITHUB_APP_CREDS_SECRET_ARN: arn:aws:secretsmanager:us-east-1:126237642437:secret:/manage/default/gh_iac_runner_keys-WyKXsK
    AWS_DEFAULT_REGION: us-east-1
    AWS_ACCESS_KEY_ID: ***
    AWS_SECRET_ACCESS_KEY: ***
    AWS_SESSION_TOKEN: ***
    GITHUB_TOKEN: ***
Found PR number: #3

[rdhar]

I was following a similar approach to retrieve the PR number

If you wouldn't mind, could you try these exact steps (feel free to comment out everything else). Although it's a similar approach, the method is different enough to have an unexpected discrepancy.

    steps:
      - name: Checkout PR code
        uses: actions/checkout@v4

      - name: Generate GitHub App Token (for PR commenting and TF GitHub Provider)
        id: generate_app_token
        uses: actions/create-github-app-token@v2.0.6
        with:
          app-id: ${{ secrets.GH_RUNNER_IAC_APP_ID }}
          private-key: ${{ secrets.GH_RUNNER_APP_PEM }}
          owner: cisco-dcloud
          repositories: dcloud-vsphere-infra,tf_vsphere_vm

      - name: Get PR number
        id: pr_number
        run: |
          associated_prs=$(gh api /repos/${{ github.repository }}/commits/${{ github.event.pull_request.head.sha || github.sha }}/pulls --method GET --field per_page=100)
          echo "associated_prs=$associated_prs"
          pr_number=$(echo "$associated_prs" | jq --raw-output '(.[] | select(.head.ref == env.GITHUB_REF_NAME) | .number) // .[0].number // 0')
          echo "pr_number=$pr_number"

Is there a way to pass the pr_number into the Provision TF step?

Not as of yet, but certainly a worthwhile feature request.

[gowgopal83]

@rdhar Please check this.

Get PR number
Run associated_prs=$(gh api /repos/cisco-dcloud/dcloud-vsphere-infra/commits/9a22a836a7a9f21de6f5bf5bab58629a454a4c96/pulls --method GET --field per_page=100)
  associated_prs=$(gh api /repos/cisco-dcloud/dcloud-vsphere-infra/commits/9a22a836a7a9f21de6f5bf5bab58629a454a4c96/pulls --method GET --field per_page=100)
  echo "associated_prs=$associated_prs"
  pr_number=$(echo "$associated_prs" | jq --raw-output '(.[] | select(.head.ref == env.GITHUB_REF_NAME) | .number) // .[0].number // 0')
  echo "pr_number=$pr_number"
  shell: /usr/bin/bash -e {0}
  env:
    AWS_REGION: us-east-1
    TERRAFORM_IAM_ROLE_ARN: arn:aws:iam::126237642437:role/tf_gh_actions_oidc_role
    GITHUB_APP_CREDS_SECRET_ARN: arn:aws:secretsmanager:us-east-1:126237642437:secret:/manage/default/gh_iac_runner_keys-WyKXsK
    GITHUB_TOKEN: ***
associated_prs=[{"url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/pulls/3","id":2625450609,"node_id":"PR_kwDONmP0686cfTJx","html_url":"https://github.com/cisco-dcloud/dcloud-vsphere-infra/pull/3","diff_url":"https://github.com/cisco-dcloud/dcloud-vsphere-infra/pull/3.diff","patch_url":"https://github.com/cisco-dcloud/dcloud-vsphere-infra/pull/3.patch","issue_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/issues/3","number":3,"state":"open","locked":false,"title":"709/dcloud core refactor","user":{"login":"gowgopal83","id":132594479,"node_id":"U_kgDOB-c7Lw","avatar_url":"https://avatars.githubusercontent.com/u/132594479?v=4","gravatar_id":"","url":"https://api.github.com/users/gowgopal83","html_url":"https://github.com/gowgopal83","followers_url":"https://api.github.com/users/gowgopal83/followers","following_url":"[https://api.github.com/users/gowgopal83/following{/other_user}](https://api.github.com/users/gowgopal83/following%7B/other_user%7D)","gists_url":"[https://api.github.com/users/gowgopal83/gists{/gist_id}](https://api.github.com/users/gowgopal83/gists%7B/gist_id%7D)","starred_url":"[https://api.github.com/users/gowgopal83/starred{/owner}{/repo}](https://api.github.com/users/gowgopal83/starred%7B/owner%7D%7B/repo%7D)","subscriptions_url":"https://api.github.com/users/gowgopal83/subscriptions","organizations_url":"https://api.github.com/users/gowgopal83/orgs","repos_url":"https://api.github.com/users/gowgopal83/repos","events_url":"[https://api.github.com/users/gowgopal83/events{/privacy}](https://api.github.com/users/gowgopal83/events%7B/privacy%7D)","received_events_url":"https://api.github.com/users/gowgopal83/received_events","type":"User","user_view_type":"public","site_admin":false},"body":null,"created_at":"2025-06-27T21:13:55Z","updated_at":"2025-07-04T14:03:24Z","closed_at":null,"merged_at":null,"merge_commit_sha":"6272e95c6d4c722a19e96a26071aa16a89b06a51","assignee":null,"assignees":[],"requested_reviewers":[],"requested_teams":[{"name":"dcloud-devops","id":9042273,"node_id":"T_kwDOByD25M4Aiflh","slug":"dcloud-devops","description":"dcloud-devops@cisco.com","privacy":"closed","notification_setting":"notifications_enabled","url":"https://api.github.com/organizations/119600868/team/9042273","html_url":"https://github.com/orgs/cisco-dcloud/teams/dcloud-devops","members_url":"[https://api.github.com/organizations/119600868/team/9042273/members{/member}](https://api.github.com/organizations/119600868/team/9042273/members%7B/member%7D)","repositories_url":"https://api.github.com/organizations/119600868/team/9042273/repos","permission":"pull","parent":null}],"labels":[],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/pulls/3/commits","review_comments_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/pulls/3/comments","review_comment_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/pulls/comments{/number}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/pulls/comments%7B/number%7D)","comments_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/issues/3/comments","statuses_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/statuses/9a22a836a7a9f21de6f5bf5bab58629a454a4c96","head":{"label":"cisco-dcloud:709/dcloud_core_refactor","ref":"709/dcloud_core_refactor","sha":"9a22a836a7a9f21de6f5bf5bab58629a454a4c96","user":{"login":"cisco-dcloud","id":119600868,"node_id":"O_kgDOByD25A","avatar_url":"https://avatars.githubusercontent.com/u/119600868?v=4","gravatar_id":"","url":"https://api.github.com/users/cisco-dcloud","html_url":"https://github.com/cisco-dcloud","followers_url":"https://api.github.com/users/cisco-dcloud/followers","following_url":"[https://api.github.com/users/cisco-dcloud/following{/other_user}](https://api.github.com/users/cisco-dcloud/following%7B/other_user%7D)","gists_url":"[https://api.github.com/users/cisco-dcloud/gists{/gist_id}](https://api.github.com/users/cisco-dcloud/gists%7B/gist_id%7D)","starred_url":"[https://api.github.com/users/cisco-dcloud/starred{/owner}{/repo}](https://api.github.com/users/cisco-dcloud/starred%7B/owner%7D%7B/repo%7D)","subscriptions_url":"https://api.github.com/users/cisco-dcloud/subscriptions","organizations_url":"https://api.github.com/users/cisco-dcloud/orgs","repos_url":"https://api.github.com/users/cisco-dcloud/repos","events_url":"[https://api.github.com/users/cisco-dcloud/events{/privacy}](https://api.github.com/users/cisco-dcloud/events%7B/privacy%7D)","received_events_url":"https://api.github.com/users/cisco-dcloud/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":912520427,"node_id":"R_kgDONmP06w","name":"dcloud-vsphere-infra","full_name":"cisco-dcloud/dcloud-vsphere-infra","private":true,"owner":{"login":"cisco-dcloud","id":119600868,"node_id":"O_kgDOByD25A","avatar_url":"https://avatars.githubusercontent.com/u/119600868?v=4","gravatar_id":"","url":"https://api.github.com/users/cisco-dcloud","html_url":"https://github.com/cisco-dcloud","followers_url":"https://api.github.com/users/cisco-dcloud/followers","following_url":"[https://api.github.com/users/cisco-dcloud/following{/other_user}](https://api.github.com/users/cisco-dcloud/following%7B/other_user%7D)","gists_url":"[https://api.github.com/users/cisco-dcloud/gists{/gist_id}](https://api.github.com/users/cisco-dcloud/gists%7B/gist_id%7D)","starred_url":"[https://api.github.com/users/cisco-dcloud/starred{/owner}{/repo}](https://api.github.com/users/cisco-dcloud/starred%7B/owner%7D%7B/repo%7D)","subscriptions_url":"https://api.github.com/users/cisco-dcloud/subscriptions","organizations_url":"https://api.github.com/users/cisco-dcloud/orgs","repos_url":"https://api.github.com/users/cisco-dcloud/repos","events_url":"[https://api.github.com/users/cisco-dcloud/events{/privacy}](https://api.github.com/users/cisco-dcloud/events%7B/privacy%7D)","received_events_url":"https://api.github.com/users/cisco-dcloud/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/cisco-dcloud/dcloud-vsphere-infra","description":"Terraform calling code repo to create on-prem VMs","fork":false,"url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra","forks_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/forks","keys_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/keys{/key_id}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/keys%7B/key_id%7D)","collaborators_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/collaborators{/collaborator}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/collaborators%7B/collaborator%7D)","teams_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/teams","hooks_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/hooks","issue_events_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/issues/events{/number}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/issues/events%7B/number%7D)","events_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/events","assignees_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/assignees{/user}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/assignees%7B/user%7D)","branches_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/branches{/branch}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/branches%7B/branch%7D)","tags_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/tags","blobs_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/git/blobs{/sha}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/git/blobs%7B/sha%7D)","git_tags_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/git/tags{/sha}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/git/tags%7B/sha%7D)","git_refs_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/git/refs{/sha}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/git/refs%7B/sha%7D)","trees_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/git/trees{/sha}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/git/trees%7B/sha%7D)","statuses_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/statuses/{sha}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/statuses/%7Bsha%7D)","languages_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/languages","stargazers_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/stargazers","contributors_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/contributors","subscribers_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/subscribers","subscription_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/subscription","commits_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/commits{/sha}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/commits%7B/sha%7D)","git_commits_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/git/commits{/sha}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/git/commits%7B/sha%7D)","comments_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/comments{/number}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/comments%7B/number%7D)","issue_comment_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/issues/comments{/number}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/issues/comments%7B/number%7D)","contents_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/contents/{+path}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/contents/%7B+path%7D)","compare_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/compare/{base}...{head}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/compare/%7Bbase%7D...%7Bhead%7D)","merges_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/merges","archive_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/{archive_format}{/ref}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/%7Barchive_format%7D%7B/ref%7D)","downloads_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/downloads","issues_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/issues{/number}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/issues%7B/number%7D)","pulls_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/pulls{/number}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/pulls%7B/number%7D)","milestones_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/milestones{/number}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/milestones%7B/number%7D)","notifications_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/notifications{?since,all,participating}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/notifications%7B?since,all,participating})","labels_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/labels{/name}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/labels%7B/name%7D)","releases_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/releases{/id}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/releases%7B/id%7D)","deployments_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/deployments","created_at":"2025-01-05T19:54:26Z","updated_at":"2025-06-30T20:39:56Z","pushed_at":"2025-07-04T14:03:14Z","git_url":"git://github.com/cisco-dcloud/dcloud-vsphere-infra.git","ssh_url":"git@github.com:cisco-dcloud/dcloud-vsphere-infra.git","clone_url":"https://github.com/cisco-dcloud/dcloud-vsphere-infra.git","svn_url":"https://github.com/cisco-dcloud/dcloud-vsphere-infra","homepage":"","size":115,"stargazers_count":0,"watchers_count":0,"language":"HCL","has_issues":false,"has_projects":false,"has_downloads":false,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":0,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":1,"license":null,"allow_forking":false,"is_template":false,"web_commit_signoff_required":false,"topics":[],"visibility":"private","forks":0,"open_issues":1,"watchers":0,"default_branch":"main"}},"base":{"label":"cisco-dcloud:main","ref":"main","sha":"360b9dd7949993434411e0546be8c521b74bd2df","user":{"login":"cisco-dcloud","id":119600868,"node_id":"O_kgDOByD25A","avatar_url":"https://avatars.githubusercontent.com/u/119600868?v=4","gravatar_id":"","url":"https://api.github.com/users/cisco-dcloud","html_url":"https://github.com/cisco-dcloud","followers_url":"https://api.github.com/users/cisco-dcloud/followers","following_url":"[https://api.github.com/users/cisco-dcloud/following{/other_user}](https://api.github.com/users/cisco-dcloud/following%7B/other_user%7D)","gists_url":"[https://api.github.com/users/cisco-dcloud/gists{/gist_id}](https://api.github.com/users/cisco-dcloud/gists%7B/gist_id%7D)","starred_url":"[https://api.github.com/users/cisco-dcloud/starred{/owner}{/repo}](https://api.github.com/users/cisco-dcloud/starred%7B/owner%7D%7B/repo%7D)","subscriptions_url":"https://api.github.com/users/cisco-dcloud/subscriptions","organizations_url":"https://api.github.com/users/cisco-dcloud/orgs","repos_url":"https://api.github.com/users/cisco-dcloud/repos","events_url":"[https://api.github.com/users/cisco-dcloud/events{/privacy}](https://api.github.com/users/cisco-dcloud/events%7B/privacy%7D)","received_events_url":"https://api.github.com/users/cisco-dcloud/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":912520427,"node_id":"R_kgDONmP06w","name":"dcloud-vsphere-infra","full_name":"cisco-dcloud/dcloud-vsphere-infra","private":true,"owner":{"login":"cisco-dcloud","id":119600868,"node_id":"O_kgDOByD25A","avatar_url":"https://avatars.githubusercontent.com/u/119600868?v=4","gravatar_id":"","url":"https://api.github.com/users/cisco-dcloud","html_url":"https://github.com/cisco-dcloud","followers_url":"https://api.github.com/users/cisco-dcloud/followers","following_url":"[https://api.github.com/users/cisco-dcloud/following{/other_user}](https://api.github.com/users/cisco-dcloud/following%7B/other_user%7D)","gists_url":"[https://api.github.com/users/cisco-dcloud/gists{/gist_id}](https://api.github.com/users/cisco-dcloud/gists%7B/gist_id%7D)","starred_url":"[https://api.github.com/users/cisco-dcloud/starred{/owner}{/repo}](https://api.github.com/users/cisco-dcloud/starred%7B/owner%7D%7B/repo%7D)","subscriptions_url":"https://api.github.com/users/cisco-dcloud/subscriptions","organizations_url":"https://api.github.com/users/cisco-dcloud/orgs","repos_url":"https://api.github.com/users/cisco-dcloud/repos","events_url":"[https://api.github.com/users/cisco-dcloud/events{/privacy}](https://api.github.com/users/cisco-dcloud/events%7B/privacy%7D)","received_events_url":"https://api.github.com/users/cisco-dcloud/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/cisco-dcloud/dcloud-vsphere-infra","description":"Terraform calling code repo to create on-prem VMs","fork":false,"url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra","forks_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/forks","keys_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/keys{/key_id}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/keys%7B/key_id%7D)","collaborators_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/collaborators{/collaborator}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/collaborators%7B/collaborator%7D)","teams_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/teams","hooks_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/hooks","issue_events_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/issues/events{/number}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/issues/events%7B/number%7D)","events_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/events","assignees_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/assignees{/user}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/assignees%7B/user%7D)","branches_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/branches{/branch}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/branches%7B/branch%7D)","tags_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/tags","blobs_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/git/blobs{/sha}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/git/blobs%7B/sha%7D)","git_tags_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/git/tags{/sha}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/git/tags%7B/sha%7D)","git_refs_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/git/refs{/sha}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/git/refs%7B/sha%7D)","trees_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/git/trees{/sha}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/git/trees%7B/sha%7D)","statuses_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/statuses/{sha}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/statuses/%7Bsha%7D)","languages_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/languages","stargazers_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/stargazers","contributors_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/contributors","subscribers_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/subscribers","subscription_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/subscription","commits_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/commits{/sha}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/commits%7B/sha%7D)","git_commits_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/git/commits{/sha}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/git/commits%7B/sha%7D)","comments_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/comments{/number}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/comments%7B/number%7D)","issue_comment_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/issues/comments{/number}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/issues/comments%7B/number%7D)","contents_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/contents/{+path}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/contents/%7B+path%7D)","compare_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/compare/{base}...{head}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/compare/%7Bbase%7D...%7Bhead%7D)","merges_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/merges","archive_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/{archive_format}{/ref}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/%7Barchive_format%7D%7B/ref%7D)","downloads_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/downloads","issues_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/issues{/number}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/issues%7B/number%7D)","pulls_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/pulls{/number}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/pulls%7B/number%7D)","milestones_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/milestones{/number}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/milestones%7B/number%7D)","notifications_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/notifications{?since,all,participating}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/notifications%7B?since,all,participating})","labels_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/labels{/name}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/labels%7B/name%7D)","releases_url":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/releases{/id}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/releases%7B/id%7D)","deployments_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/deployments","created_at":"2025-01-05T19:54:26Z","updated_at":"2025-06-30T20:39:56Z","pushed_at":"2025-07-04T14:03:14Z","git_url":"git://github.com/cisco-dcloud/dcloud-vsphere-infra.git","ssh_url":"git@github.com:cisco-dcloud/dcloud-vsphere-infra.git","clone_url":"https://github.com/cisco-dcloud/dcloud-vsphere-infra.git","svn_url":"https://github.com/cisco-dcloud/dcloud-vsphere-infra","homepage":"","size":115,"stargazers_count":0,"watchers_count":0,"language":"HCL","has_issues":false,"has_projects":false,"has_downloads":false,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":0,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":1,"license":null,"allow_forking":false,"is_template":false,"web_commit_signoff_required":false,"topics":[],"visibility":"private","forks":0,"open_issues":1,"watchers":0,"default_branch":"main"}},"_links":{"self":{"href":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/pulls/3"},"html":{"href":"https://github.com/cisco-dcloud/dcloud-vsphere-infra/pull/3"},"issue":{"href":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/issues/3"},"comments":{"href":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/issues/3/comments"},"review_comments":{"href":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/pulls/3/comments"},"review_comment":{"href":"[https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/pulls/comments{/number}](https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/pulls/comments%7B/number%7D)"},"commits":{"href":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/pulls/3/commits"},"statuses":{"href":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/statuses/9a22a836a7a9f21de6f5bf5bab58629a454a4c96"}},"author_association":"CONTRIBUTOR","auto_merge":null,"active_lock_reason":null}]
pr_number=3

[rdhar]

The mystery deepens! And that's from workflow_dispatch trigger, right?

I went through the workflow, making slight tweaks, without changing the originally intended functionality. Could you give it a try and share the output, if any?

on:
  pull_request:
    types: [opened, synchronize]
  push:
    branches: [main]
  workflow_dispatch:
    inputs:
      # checkov:skip=CKV_GHA_7
      # reason="This workflow manages team members by design and inputs are validated strictly."
      tf_directory:
        description: "Directory of the terraform code to plan"
        required: true
        default: "terraform/production"
        type: string
      tf_workspace:
        description: "Terraform workspace to use"
        required: false
        default: ""
        type: string

jobs:
  terraform_plan_on_pr:
    runs-on: [dcloud-runner]

    permissions:
      actions: read
      checks: write
      contents: read
      id-token: write
      pull-requests: write

    env:
      AWS_REGION: ${{ vars.DCLOUD_MANAGE_AWS_REGION }}
      TERRAFORM_IAM_ROLE_ARN: ${{ vars.DCLOUD_MANAGE_TF_IAM_ASSUME_ROLE }}
      GITHUB_APP_CREDS_SECRET_ARN: ${{ vars.DCLOUD_MANAGE_GH_RUNNER_SECRET_ARN }}

    steps:
      - name: Checkout PR code
        uses: actions/checkout@v4

      - name: Authenticate AWS
        uses: aws-actions/configure-aws-credentials@v4
        with:
          aws-region: ${{ env.AWS_REGION }}
          role-session-name: "gh-tf-plan-pr-${{ github.run_id }}"
          role-to-assume: ${{ env.TERRAFORM_IAM_ROLE_ARN }}

      - name: Generate GitHub App Token
        id: generate_app_token
        uses: actions/create-github-app-token@v2
        with:
          app-id: ${{ secrets.GH_RUNNER_IAC_APP_ID }}
          private-key: ${{ secrets.GH_RUNNER_APP_PEM }}
          owner: cisco-dcloud
          repositories: dcloud-vsphere-infra,tf_vsphere_vm

      - name: Authenticate Git for Private Modules
        run: git config --global url."https://x-access-token:${{ steps.generate_app_token.outputs.token }}@github.com/".insteadOf "https://github.com/"

      - name: Setup Terraform
        uses: hashicorp/setup-terraform@v3
        with:
          terraform_version: "1.10.5"
          terraform_wrapper: false

      - name: Provision Terraform
        uses: op5dev/tf-via-pr@v13
        id: terraform
        with:
          token: ${{ steps.generate_app_token.outputs.token }}
          command: ${{ github.event_name == 'push' && 'apply' || 'plan' }}
          arg-backend-config: manage-account.ini
          arg-workspace: ${{ inputs.tf_workspace || '' }}
          working-directory: ${{ inputs.tf_directory || 'terraform/production' }}
      
      - name: Echo TF-via-PR Outputs
        continue-on-error: true
        run: |
          echo "check-id: ${{ steps.terraform.outputs.check-id }}"
          echo "command: ${{ steps.terraform.outputs.command }}"
          echo "comment-id: ${{ steps.terraform.outputs.comment-id }}"
          echo "diff: ${{ steps.terraform.outputs.diff }}"
          echo "exitcode: ${{ steps.terraform.outputs.exitcode }}"
          echo "identifier: ${{ steps.terraform.outputs.identifier }}"
          echo "job-id: ${{ steps.terraform.outputs.job-id }}"
          echo "plan-id: ${{ steps.terraform.outputs.plan-id }}"
          echo "plan-url: ${{ steps.terraform.outputs.plan-url }}"
          echo "result: ${{ steps.terraform.outputs.result }}"
          echo "run-url: ${{ steps.terraform.outputs.run-url }}"
          echo "summary: ${{ steps.terraform.outputs.summary }}"

[gowgopal83]

Have tried this.

Automatic trigger output follows.

Run # TF show.
  # TF show.
  terraform -chdir=dcloud_core show tfplan > tf.console.txt
  
  # Diff of changes.
  # Filter lines starting with "  # " and save to tf.diff.txt, then prepend diff-specific symbols based on specific keywords.
  grep '^  # ' tf.console.txt | sed \
    -e 's/^  # \(.* be created\)/+ \1/' \
    -e 's/^  # \(.* be destroyed\)/- \1/' \
    -e 's/^  # \(.* be updated\|.* be replaced\)/! \1/' \
    -e 's/^  # \(.* be read\)/~ \1/' \
    -e 's/^  # \(.*\)/# \1/' > tf.diff.txt || true
  shell: /usr/bin/bash --noprofile --norc -e -o pipefail {0}
  env:
    AWS_REGION: us-east-1
    TERRAFORM_IAM_ROLE_ARN: arn:aws:iam::126237642437:role/tf_gh_actions_oidc_role
    GITHUB_APP_CREDS_SECRET_ARN: arn:aws:secretsmanager:us-east-1:126237642437:secret:/manage/default/gh_iac_runner_keys-WyKXsK
    AWS_DEFAULT_REGION: us-east-1
    AWS_ACCESS_KEY_ID: ***
    AWS_SECRET_ACCESS_KEY: ***
    AWS_SESSION_TOKEN: ***
    GH_API: X-GitHub-Api-Version:2022-11-28
    GH_TOKEN: ***
    TF_CLI_ARGS: -no-color
    TF_IN_AUTOMATION: true
    TF_INPUT: false
    TF_WORKSPACE: sng-dev
Run actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
With the provided path, there will be 1 file uploaded
Artifact name is valid!
Root directory input is valid!
Beginning upload of artifact content to blob storage
Uploaded bytes 36008
Finished uploading artifact content to blob storage!
SHA256 digest of uploaded artifact zip is b53e7587cf3bc629f2e74fdc5a8b03b550e2025f4fd5a92b48031166cc437d4d
Finalizing artifact upload
Artifact terraform-3-f965ee3c92a835683729bfa68b135048.tfplan.zip successfully finalized. Artifact ID 3466948161
Artifact terraform-3-f965ee3c92a835683729bfa68b135048.tfplan has been successfully uploaded! Final size is 36008 bytes. Artifact ID is 3466948161
Artifact download URL: https://github.com/cisco-dcloud/dcloud-vsphere-infra/actions/runs/16076928151/artifacts/3466948161
Run # Post output.
  # Post output.
  # Parse the "tf.command.txt" file.
  command=$(cat tf.command.txt)
  
  # Remove each comma-delemited "hide-args" argument from the command.
  IFS=',' read -ra hide_args <<< "detailed-exitcode,parallelism,lock,out,var="
  for arg in "${hide_args[@]}"; do
    command=$(echo "$command" | grep --invert-match "^ -${arg}" || true)
  done
  
  # Conversely, show each comma-delemited "show-args" argument in the command.
  command_append=""
  IFS=',' read -ra show_args <<< "workspace"
  for arg in "${show_args[@]}"; do
    command_append+=$(echo " -workspace=sng-dev -backend-config=manage-account.ini -check -detailed-exitcode -diff -recursive" | sed 's/ -/\n -/g' | grep "^ -${arg}" || true)
  done
  
  # Consolidate 'command', taking both "hide-args" and "show-args" into account.
  command=$(echo "$command" | tr -d '\n')$command_append
  echo "command=$command" >> "$GITHUB_OUTPUT"
  
  # Parse the "tf.console.txt" file, truncated for character limit.
  console=$(head --bytes=42000 tf.console.txt)
  if [[ ${#console} -eq 42000 ]]; then console="${console}"$'\n…'; fi
  echo "result<<EORESULTTFVIAPR"$'\n'"$console"$'\n'EORESULTTFVIAPR >> "$GITHUB_OUTPUT"
  
  # Parse the "tf.console.txt" file for the summary.
  summary=$(awk '/^(Error:|Plan:|Apply complete!|No changes.|Success)/ {line=$0} END {if (line) print line; else print "View output."}' tf.console.txt)
  echo "summary=$summary" >> "$GITHUB_OUTPUT"
  
  # If "steps.format.outcome" failed, set syntax highlighting to "diff", otherwise set it to "hcl".
  syntax="hcl"
  if [[ "skipped" == "failure" ]]; then syntax="diff"; fi
  
  # Add summary to the job status.
  check_run=$(gh api /repos/cisco-dcloud/dcloud-vsphere-infra/check-runs/45374211004 --header "$GH_API" --method PATCH --field "output[title]=${summary}" --field "output[summary]=${summary}")
  
  # From "check_run", echo "html_url".
  check_url=$(echo "$check_run" | jq --raw-output '.html_url')
  echo "check_id=$(echo "$check_run" | jq --raw-output '.id')" >> "$GITHUB_OUTPUT"
  run_url=$(echo ${check_url}#step:7:1)
  echo "run_url=$run_url" >> "$GITHUB_OUTPUT"
  
  # If "tf.diff.txt" exists, display it within a "diff" block, truncated for character limit.
  if [[ -s tf.diff.txt ]]; then
    # Get count of lines in "tf.diff.txt" which do not start with "# ".
    diff_count=$(grep --invert-match '^# ' tf.diff.txt | wc --lines)
    if [[ $diff_count -eq 1 ]]; then diff_change="change"; else diff_change="changes"; fi
  
    # Parse diff of changes, truncated for character limit.
    diff_truncated=$(head --bytes=24000 tf.diff.txt)
    if [[ ${#diff_truncated} -eq 24000 ]]; then diff_truncated="${diff_truncated}"$'\n…'; fi
    echo "diff<<EODIFFTFVIAPR"$'\n'"$diff_truncated"$'\n'EODIFFTFVIAPR >> "$GITHUB_OUTPUT"
  
    diff="
  <details><summary>Diff of ${diff_count} ${diff_change}.</summary>
  
  \`\`\`diff
  ${diff_truncated}
  \`\`\`
  </details>"
  else
    diff=""
  fi
  
  # Set flags for creating PR comment and tagging actor.
  create_comment=""
  tag_actor=""
  if [[ $exitcode -ne 0 ]]; then
    if [[ "always" == "on-change" ]]; then create_comment="true"; fi
    if [[ "always" == "on-change" ]]; then tag_actor="true"; fi
  fi
  if [[ "always" == "always" ]]; then create_comment="true"; fi
  if [[ "always" == "always" ]]; then tag_actor="true"; fi
  if [[ "$tag_actor" == "true" ]]; then handle="@"; else handle=""; fi
  
  # Collate body content.
  body=$(cat <<EOBODYTFVIAPR
  <!-- placeholder-1 -->
  \`\`\`fish
  ${command}
  \`\`\`
  <!-- placeholder-2 -->
  ${diff}
  <!-- placeholder-3 -->
  <details><summary>${summary}</br>
  
  <!-- placeholder-4 -->
  ###### By ${handle}gowgopal83 at 2025-07-04T15:26:46Z [(view log)](${run_url}).
  </summary>
  
  \`\`\`${syntax}
  ${console}
  \`\`\`
  </details>
  <!-- placeholder-5 -->
  <!-- terraform-3-f965ee3c92a835683729bfa68b135048.tfplan -->
  <!-- placeholder-6 -->
  EOBODYTFVIAPR
  )
  
  # Post output to job summary.
  echo "$body" >> $GITHUB_STEP_SUMMARY
  echo "comment_body<<EOCOMMENTTFVIAPR"$'\n'"$body"$'\n'EOCOMMENTTFVIAPR >> "$GITHUB_OUTPUT"
  
  # Post PR comment if configured and PR exists.
  if [[ "$create_comment" == "true" && "3" != "0" ]]; then
    # Check if the PR contains a bot comment with the same identifier.
    list_comments=$(gh api /repos/cisco-dcloud/dcloud-vsphere-infra/issues/3/comments --header "$GH_API" --method GET --field per_page=100)
    bot_comment=$(echo "$list_comments" | jq --raw-output --arg identifier "terraform-3-f965ee3c92a835683729bfa68b135048.tfplan" '.[] | select(.user.type == "Bot") | select(.body | contains($identifier)) | .id' | tail -n 1)
  
    if [[ -n "$bot_comment" ]]; then
      if [[ "update" == "recreate" ]]; then
        # Delete previous comment before posting a new one.
        gh api /repos/cisco-dcloud/dcloud-vsphere-infra/issues/comments/${bot_comment} --header "$GH_API" --method DELETE
        pr_comment=$(gh api /repos/cisco-dcloud/dcloud-vsphere-infra/issues/3/comments --header "$GH_API" --method POST --field "body=${body}")
        echo "comment_id=$(echo "$pr_comment" | jq --raw-output '.id')" >> "$GITHUB_OUTPUT"
      elif [[ "update" == "update" ]]; then
        # Update existing comment.
        pr_comment=$(gh api /repos/cisco-dcloud/dcloud-vsphere-infra/issues/comments/${bot_comment} --header "$GH_API" --method PATCH --field "body=${body}")
        echo "comment_id=$(echo "$pr_comment" | jq --raw-output '.id')" >> "$GITHUB_OUTPUT"
      fi
    else
      # Post new comment.
      pr_comment=$(gh api /repos/cisco-dcloud/dcloud-vsphere-infra/issues/3/comments --header "$GH_API" --method POST --field "body=${body}")
      echo "comment_id=$(echo "$pr_comment" | jq --raw-output '.id')" >> "$GITHUB_OUTPUT"
    fi
  elif [[ "always" == "on-change" && "3" != "0" ]]; then
    # Delete previous comment due to no changes.
    list_comments=$(gh api /repos/cisco-dcloud/dcloud-vsphere-infra/issues/3/comments --header "$GH_API" --method GET --field per_page=100)
    bot_comment=$(echo "$list_comments" | jq --raw-output --arg identifier "terraform-3-f965ee3c92a835683729bfa68b135048.tfplan" '.[] | select(.user.type == "Bot") | select(.body | contains($identifier)) | .id' | tail -n 1)
  
    if [[ -n "$bot_comment" ]]; then
      gh api /repos/cisco-dcloud/dcloud-vsphere-infra/issues/comments/${bot_comment} --header "$GH_API" --method DELETE
    fi
  fi
  
  # Optionally delete the plan file.
  if [[ "$PRESERVE_PLAN" != "true" ]]; then
    rm --force "dcloud_core/tfplan"
  fi
  
  # Clean up files.
  rm --force tf.command.txt tf.console.txt tf.diff.txt
  shell: /usr/bin/bash --noprofile --norc -e -o pipefail {0}
  env:
    AWS_REGION: us-east-1
    TERRAFORM_IAM_ROLE_ARN: arn:aws:iam::126237642437:role/tf_gh_actions_oidc_role
    GITHUB_APP_CREDS_SECRET_ARN: arn:aws:secretsmanager:us-east-1:126237642437:secret:/manage/default/gh_iac_runner_keys-WyKXsK
    AWS_DEFAULT_REGION: us-east-1
    AWS_ACCESS_KEY_ID: ***
    AWS_SECRET_ACCESS_KEY: ***
    AWS_SESSION_TOKEN: ***
    GH_API: X-GitHub-Api-Version:2022-11-28
    GH_TOKEN: ***
    TF_CLI_ARGS: -no-color
    TF_IN_AUTOMATION: true
    TF_INPUT: false
    TF_WORKSPACE: sng-dev
    exitcode: 2
    PRESERVE_PLAN: false
gh: Resource not accessible by integration (HTTP 403)
Error: Process completed with exit code 1.

[rdhar]

Did it not produce any outputs for the "Echo TF-via-PR Outputs" step?

---

Also interesting to note, this time around, the "Artifact terraform-3-f965ee3c92a835683729bfa68b135048.tfplan.zip successfully finalized is correctly formatted with the PR number in between the -- dashes.

---

Since we keep seeing this, "gh: Resource not accessible by integration (HTTP 403)" error, I'm tempted to suggest replacing the entire permissions: block with permissions: write-all for one trial run.

[gowgopal83]

Sorry, no success with permissions: write-all as well. And Echo TF-via-PR Outputs step got skipped due to the previous step failure

[rdhar]

That is odd, but the "Echo TF-via-PR Outputs" should still run despite previous step failure due to continue-on-error: true.

[gowgopal83]

I made a little change in the code. The automatic trigger output is as follows.

workflows:

      - name: Provision Terraform
        uses: op5dev/tf-via-pr@v13
        id: terraform
        continue-on-error: true  # Allow the job to continue despite this step's failure
        with:
          token: ${{ steps.generate_app_token.outputs.token }}
          command: ${{ github.event_name == 'push' && 'apply' || 'plan' }}
          arg-backend-config: manage-account.ini
          arg-workspace: ${{ inputs.tf_workspace || 'sng-dev' }}
          working-directory: ${{ inputs.tf_directory || 'dcloud_core' }}

      - name: Echo TF-via-PR Outputs
        continue-on-error: true
        run: |
          echo "check-id: ${{ steps.terraform.outputs.check-id }}"
          echo "command: ${{ steps.terraform.outputs.command }}"
          echo "comment-id: ${{ steps.terraform.outputs.comment-id }}"
          echo "diff: ${{ steps.terraform.outputs.diff }}"
          echo "exitcode: ${{ steps.terraform.outputs.exitcode }}"
          echo "identifier: ${{ steps.terraform.outputs.identifier }}"
          echo "job-id: ${{ steps.terraform.outputs.job-id }}"
          echo "plan-id: ${{ steps.terraform.outputs.plan-id }}"
          echo "plan-url: ${{ steps.terraform.outputs.plan-url }}"
          echo "result: ${{ steps.terraform.outputs.result }}"
          echo "run-url: ${{ steps.terraform.outputs.run-url }}"
          echo "summary: ${{ steps.terraform.outputs.summary }}"

Output

gh: Resource not accessible by integration (HTTP 403)
Error: Process completed with exit code 1.
0s
Run echo "check-id: "
  echo "check-id: "
  echo "command: terraform plan -chdir=dcloud_core -workspace=sng-dev"
  echo "comment-id: "
  echo "diff: "
  echo "exitcode: 2"
  echo "identifier: terraform-3-f965ee3c92a835683729bfa68b135048.tfplan"
  echo "job-id: 45377707828"
  echo "plan-id: 3467329717"
  echo "plan-url: https://github.com/cisco-dcloud/dcloud-vsphere-infra/actions/runs/16078098152/artifacts/3467329717"
  echo "result: 
  Terraform used the selected providers to generate the following execution
  plan. Resource actions are indicated with the following symbols:
    + create
    - destroy
    ...
    echo "run-url: "
    echo "summary: Plan: 12 to add, 0 to change, 6 to destroy." 

[rdhar]

The automatic trigger output is as follows

Just to clarify, this is manually triggered via workflow_dispatch event?

[rdhar]

The last "Echo TF-via-PR Outputs" log is interesting because it appears that echo "check-id: " is empty, so TF-via-PR failed somewhere before that. There are only two gh CLI commands before that point. As before, could you try this out (commenting out everything else).

    steps:
      - name: Checkout PR code
        uses: actions/checkout@v4

      - name: Generate GitHub App Token (for PR commenting and TF GitHub Provider)
        id: generate_app_token
        uses: actions/create-github-app-token@v2.0.6
        with:
          app-id: ${{ secrets.GH_RUNNER_IAC_APP_ID }}
          private-key: ${{ secrets.GH_RUNNER_APP_PEM }}
          owner: cisco-dcloud
          repositories: dcloud-vsphere-infra,tf_vsphere_vm

      - name: Get PR number
        id: pr_number
        run: |
          workflow_run=$(gh api /repos/${{ github.repository }}/actions/runs/${{ github.run_id }}/attempts/${{ github.run_attempt }}/jobs --method GET)
          echo "workflow_run=$workflow_run"

          job_id=$(echo "$workflow_run" | jq --raw-output '(.jobs[] | select((.name | ascii_downcase | gsub("-|_"; " ")) == (env.GITHUB_JOB | ascii_downcase | gsub("-|_"; " "))) | .id) // .jobs[0].id' | tail -n 1)
          echo "job_id=$job_id"

          check_run=$(gh api /repos/${{ github.repository }}/check-runs/${job_id} --method PATCH --field "output[title]=CHECK_SUMMARY" --field "output[summary]=CHECK_SUMMARY")
          echo "check_run=$check_run"

[gowgopal83]

@rdhar Please check below for the details.

Code:

   - name: Checkout PR code
     uses: actions/checkout@v4

     - name: Get PR number
        id: pr_number
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          workflow_run=$(gh api /repos/${{ github.repository }}/actions/runs/${{ github.run_id }}/attempts/${{ github.run_attempt }}/jobs --method GET)
          echo "workflow_run=$workflow_run"

          job_id=$(echo "$workflow_run" | jq --raw-output '(.jobs[] | select((.name | ascii_downcase | gsub("-|_"; " ")) == (env.GITHUB_JOB | ascii_downcase | gsub("-|_"; " "))) | .id) // .jobs[0].id' | tail -n 1)
          echo "job_id=$job_id"

          check_run=$(gh api /repos/${{ github.repository }}/check-runs/${job_id} --method PATCH --field "output[title]=CHECK_SUMMARY" --field "output[summary]=CHECK_SUMMARY")
          echo "check_run=$check_run"

Automatic execution:

workflow_run={"total_count":1,"jobs":[{"id":45396272177,"run_id":16085595021,"workflow_name":"Terraform Plan on PR","head_branch":"709/dcloud_core_refactor","run_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/actions/runs/16085595021","run_attempt":1,"node_id":"CR_kwDONmP0688AAAAKkdQkMQ","head_sha":"73c24e4c01135b549ade05713549be930d369d80","url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/actions/jobs/45396272177","html_url":"https://github.com/cisco-dcloud/dcloud-vsphere-infra/actions/runs/16085595021/job/45396272177","status":"in_progress","conclusion":null,"created_at":"2025-07-05T06:53:10Z","started_at":"2025-07-05T06:53:20Z","completed_at":null,"name":"terraform_plan_on_pr","steps":[{"name":"Set up job","status":"completed","conclusion":"success","number":1,"started_at":"2025-07-05T06:53:21Z","completed_at":"2025-07-05T06:53:22Z"},{"name":"Checkout PR code","status":"completed","conclusion":"success","number":2,"started_at":"2025-07-05T06:53:22Z","completed_at":"2025-07-05T06:53:23Z"},{"name":"Generate GitHub App Token (for PR commenting and TF GitHub Provider)","status":"in_progress","conclusion":null,"number":3,"started_at":"2025-07-05T06:53:23Z","completed_at":null},{"name":"Get PR number","status":"pending","conclusion":null,"number":4,"started_at":null,"completed_at":null},{"name":"Post Generate GitHub App Token (for PR commenting and TF GitHub Provider)","status":"pending","conclusion":null,"number":7,"started_at":null,"completed_at":null},{"name":"Post Checkout PR code","status":"pending","conclusion":null,"number":8,"started_at":null,"completed_at":null}],"check_run_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/check-runs/45396272177","labels":["dcloud-runner"],"runner_id":98,"runner_name":"dcloud-runner_6fca4907b9fb","runner_group_id":1,"runner_group_name":"default"}]}
job_id=45396272177
check_run={"id":45396272177,"name":"terraform_plan_on_pr","node_id":"CR_kwDONmP0688AAAAKkdQkMQ","head_sha":"73c24e4c01135b549ade05713549be930d369d80","external_id":"56c43c4e-709e-5468-b9df-2b3ab8d79ab0","url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/check-runs/45396272177","html_url":"https://github.com/cisco-dcloud/dcloud-vsphere-infra/actions/runs/16085595021/job/45396272177","details_url":"https://github.com/cisco-dcloud/dcloud-vsphere-infra/actions/runs/16085595021/job/45396272177","status":"in_progress","conclusion":null,"started_at":"2025-07-05T06:53:20Z","completed_at":null,"output":{"title":"CHECK_SUMMARY","summary":"CHECK_SUMMARY","text":null,"annotations_count":0,"annotations_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/check-runs/45396272177/annotations"},"check_suite":{"id":41217778262},"app":{"id":15368,"client_id":"Iv1.05c79e9ad1f6bdfa","slug":"github-actions","node_id":"MDM6QXBwMTUzNjg=","owner":{"login":"github","id":9919,"node_id":"MDEyOk9yZ2FuaXphdGlvbjk5MTk=","avatar_url":"https://avatars.githubusercontent.com/u/9919?v=4","gravatar_id":"","url":"https://api.github.com/users/github","html_url":"https://github.com/github","followers_url":"https://api.github.com/users/github/followers","following_url":"[https://api.github.com/users/github/following{/other_user}](https://api.github.com/users/github/following%7B/other_user%7D)","gists_url":"[https://api.github.com/users/github/gists{/gist_id}](https://api.github.com/users/github/gists%7B/gist_id%7D)","starred_url":"[https://api.github.com/users/github/starred{/owner}{/repo}](https://api.github.com/users/github/starred%7B/owner%7D%7B/repo%7D)","subscriptions_url":"https://api.github.com/users/github/subscriptions","organizations_url":"https://api.github.com/users/github/orgs","repos_url":"https://api.github.com/users/github/repos","events_url":"[https://api.github.com/users/github/events{/privacy}](https://api.github.com/users/github/events%7B/privacy%7D)","received_events_url":"https://api.github.com/users/github/received_events","type":"Organization","user_view_type":"public","site_admin":false},"name":"GitHub Actions","description":"Automate your workflow from idea to production","external_url":"https://help.github.com/en/actions","html_url":"https://github.com/apps/github-actions","created_at":"2018-07-30T09:30:17Z","updated_at":"2025-03-07T16:35:00Z","permissions":{"actions":"write","administration":"read","attestations":"write","checks":"write","contents":"write","deployments":"write","discussions":"write","issues":"write","merge_queues":"write","metadata":"read","models":"read","packages":"write","pages":"write","pull_requests":"write","repository_hooks":"write","repository_projects":"write","security_events":"write","statuses":"write","vulnerability_alerts":"read"},"events":["branch_protection_rule","check_run","check_suite","create","delete","deployment","deployment_status","discussion","discussion_comment","fork","gollum","issues","issue_comment","label","merge_group","milestone","page_build","project","project_card","project_column","public","pull_request","pull_request_review","pull_request_review_comment","push","registry_package","release","repository","repository_dispatch","status","watch","workflow_dispatch","workflow_run"]},"pull_requests":[{"url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/pulls/3","id":2625450609,"number":3,"head":{"ref":"709/dcloud_core_refactor","sha":"73c24e4c01135b549ade05713549be930d369d80","repo":{"id":912520427,"url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra","name":"dcloud-vsphere-infra"}},"base":{"ref":"main","sha":"360b9dd7949993434411e0546be8c521b74bd2df","repo":{"id":912520427,"url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra","name":"dcloud-vsphere-infra"}}}]}

Manual trigger.

workflow_run={"total_count":1,"jobs":[{"id":45396338698,"run_id":16085627425,"workflow_name":"Terraform Plan on PR","head_branch":"709/dcloud_core_refactor","run_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/actions/runs/16085627425","run_attempt":1,"node_id":"CR_kwDONmP0688AAAAKkdUoCg","head_sha":"73c24e4c01135b549ade05713549be930d369d80","url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/actions/jobs/45396338698","html_url":"https://github.com/cisco-dcloud/dcloud-vsphere-infra/actions/runs/16085627425/job/45396338698","status":"in_progress","conclusion":null,"created_at":"2025-07-05T06:57:32Z","started_at":"2025-07-05T06:57:34Z","completed_at":null,"name":"terraform_plan_on_pr","steps":[{"name":"Set up job","status":"completed","conclusion":"success","number":1,"started_at":"2025-07-05T06:57:35Z","completed_at":"2025-07-05T06:57:36Z"},{"name":"Checkout PR code","status":"completed","conclusion":"success","number":2,"started_at":"2025-07-05T06:57:36Z","completed_at":
job_id=45396338698
check_run={"id":45396338698,"name":"terraform_plan_on_pr","node_id":"CR_kwDONmP0688AAAAKkdUoCg","head_sha":"73c24e4c01135b549ade05713549be930d369d80","external_id":"de3d7332-0668-5e66-97e0-d50f1d79abf4","url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/check-runs/45396338698","html_url":"https://github.com/cisco-dcloud/dcloud-vsphere-infra/actions/runs/16085627425/job/45396338698","details_url":"https://github.com/cisco-dcloud/dcloud-vsphere-infra/actions/runs/16085627425/job/45396338698","status":"in_progress","conclusion":null,"started_at":"2025-07-05T06:57:34Z","completed_at":null,"output":{"title":"CHECK_SUMMARY","summary":"CHECK_SUMMARY","text":null,"annotations_count":0,"annotations_url":"https://api.github.com/repos/cisco-dcloud/dcloud-vsphere-infra/check-runs/45396338698/annotations"},"check_suite":{"id":41217843628},"app":{"id":15368,"client_id":"Iv1.05c79e9ad1f6bdfa","slug":"github-actions","node_id":"MDM6QXBwMTUzNjg=","owner":{"login":"github","id":9919,"node_id":"MDEyOk9yZ2FuaX