Repository navigation

feat: add the validate-min-terraform action (ENG-8760) #4

	name: CI

	on:
	push:
	branches:
	- main
	pull_request:
	branches:
	- main

	permissions: {}

	jobs:
	lint:
	runs-on: ubuntu-latest
	permissions:
	contents: read
	steps:
	- name: Checkout
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	persist-credentials: false

	- uses: j178/prek-action@4e14d07f9231acabce116ccfca13b13dd9755ece # v3.0.0
	with:
	# Without a pin this installs whatever prek released most recently,
	# so a hostile release reaches CI with no change here. The version
	# moves when someone chooses to move it.
	prek-version: 0.5.5
	env:
	# zizmor's five online audits skip silently without a token, and its
	# summary line reads the same either way, so CI would look green with
	# the supply-chain audits never having run.
	GH_TOKEN: ${{ github.token }}

	test:
	runs-on: ubuntu-latest
	permissions:
	contents: read
	steps:
	- name: Checkout
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	persist-credentials: false

	- name: Run the tests
	run: python3 -m unittest discover -s validate-min-terraform -p 'test_*.py'