[PFMENG-2716] fix v2 for dualstack #106
Conversation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| node-version: 18 | ||
|
|
||
| - name: Setup Terraform | ||
| uses: hashicorp/setup-terraform@v3 |
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium
| cli_config_credentials_token: ${{ secrets.TFE_TOKEN }} | ||
|
|
||
| - name: Setup Helm | ||
| uses: azure/setup-helm@v4 |
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium
| - name: precommit run tflint hooks | ||
| id: precommit_run_hooks_all | ||
| if: inputs.pre_commit_run_all | ||
| uses: pre-commit/action@v3.0.1 |
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium
| key: ${{ runner.os }}-terraform-${{ hashFiles('**/.terraform.lock.hcl') }} | ||
|
|
||
| - name: Setup Terraform | ||
| uses: hashicorp/setup-terraform@v3 |
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium
| cli_config_credentials_token: ${{ secrets.TFE_TOKEN }} | ||
|
|
||
| - name: Setup Helm | ||
| uses: azure/setup-helm@v4 |
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium
| key: ${{ runner.os }}-tflint-${{ hashFiles('.tflint.hcl') }} | ||
|
|
||
| - name: Setup TFLint | ||
| uses: terraform-linters/setup-tflint@v4 |
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium
| - name: precommit run tflint hooks | ||
| id: precommit_run_hooks_all | ||
| if: inputs.pre_commit_run_all | ||
| uses: pre-commit/action@v3.0.1 |
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium
| submodules: ${{ inputs.enable_submodules }} | ||
|
|
||
| - name: Run Trivy vulnerability scanner in IaC mode | ||
| uses: aquasecurity/trivy-action@0.23.0 |
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium
|
|
||
| - name: Get changed files | ||
| id: changed-files | ||
| uses: tj-actions/changed-files@v44 |
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium
|
|
||
| - name: Run Checkov action | ||
| id: checkov | ||
| uses: bridgecrewio/checkov-action@master |
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium
No description provided.