@biffo/cli 0.41.2 → 0.41.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -27,6 +27,11 @@ concurrency:
|
|
|
27
27
|
env:
|
|
28
28
|
NODE_VERSION: '22'
|
|
29
29
|
PYTHON_VERSION: '3.13'
|
|
30
|
+
# Defence in depth for the class of bug in #322: an interactive Terraform
|
|
31
|
+
# prompt on a CI runner has no stdin to read and blocks until the job is
|
|
32
|
+
# killed. Every invocation also passes -input=false explicitly and a drift
|
|
33
|
+
# guard enforces that; this is the backstop for one added without it.
|
|
34
|
+
TF_INPUT: '0'
|
|
30
35
|
|
|
31
36
|
jobs:
|
|
32
37
|
js:
|
|
@@ -174,7 +179,7 @@ jobs:
|
|
|
174
179
|
- name: Validate infra
|
|
175
180
|
working-directory: infra
|
|
176
181
|
run: |
|
|
177
|
-
terraform init -backend=false
|
|
182
|
+
terraform init -input=false -backend=false
|
|
178
183
|
terraform validate
|
|
179
184
|
- name: Checkov (Terraform SAST)
|
|
180
185
|
uses: bridgecrewio/checkov-action@v12
|
|
@@ -35,6 +35,11 @@ permissions:
|
|
|
35
35
|
env:
|
|
36
36
|
NODE_VERSION: '22'
|
|
37
37
|
TERRAFORM_VERSION: '~> 1.9'
|
|
38
|
+
# Defence in depth for the class of bug in #322: an interactive Terraform
|
|
39
|
+
# prompt on a CI runner has no stdin to read and blocks until the job is
|
|
40
|
+
# killed. Every invocation also passes -input=false explicitly and a drift
|
|
41
|
+
# guard enforces that; this is the backstop for one added without it.
|
|
42
|
+
TF_INPUT: '0'
|
|
38
43
|
|
|
39
44
|
jobs:
|
|
40
45
|
resolve-environment:
|
|
@@ -78,8 +83,10 @@ jobs:
|
|
|
78
83
|
key = "${{ needs.resolve-environment.outputs.environment }}/terraform.tfstate"
|
|
79
84
|
region = "${{ vars.AWS_REGION || 'us-east-1' }}"
|
|
80
85
|
EOF
|
|
81
|
-
- run: terraform init -backend-config=backend.hcl
|
|
82
|
-
|
|
86
|
+
- run: terraform init -input=false -backend-config=backend.hcl
|
|
87
|
+
timeout-minutes: 10
|
|
88
|
+
- run: terraform apply -input=false -auto-approve
|
|
89
|
+
timeout-minutes: 45
|
|
83
90
|
env:
|
|
84
91
|
TF_VAR_project_name: ${{ vars.PROJECT_NAME }}
|
|
85
92
|
TF_VAR_environment: ${{ needs.resolve-environment.outputs.environment }}
|
|
@@ -33,6 +33,11 @@ concurrency:
|
|
|
33
33
|
|
|
34
34
|
env:
|
|
35
35
|
TERRAFORM_VERSION: '~> 1.9'
|
|
36
|
+
# Defence in depth for the class of bug in #322: an interactive Terraform
|
|
37
|
+
# prompt on a CI runner has no stdin to read and blocks until the job is
|
|
38
|
+
# killed. Every invocation also passes -input=false explicitly and a drift
|
|
39
|
+
# guard enforces that; this is the backstop for one added without it.
|
|
40
|
+
TF_INPUT: '0'
|
|
36
41
|
|
|
37
42
|
jobs:
|
|
38
43
|
destroy:
|
|
@@ -59,8 +64,10 @@ jobs:
|
|
|
59
64
|
key = "${{ inputs.environment }}/terraform.tfstate"
|
|
60
65
|
region = "${{ vars.AWS_REGION || 'us-east-1' }}"
|
|
61
66
|
EOF
|
|
62
|
-
- run: terraform init -backend-config=backend.hcl
|
|
63
|
-
|
|
67
|
+
- run: terraform init -input=false -backend-config=backend.hcl
|
|
68
|
+
timeout-minutes: 10
|
|
69
|
+
- run: terraform destroy -input=false -auto-approve
|
|
70
|
+
timeout-minutes: 45
|
|
64
71
|
env:
|
|
65
72
|
TF_VAR_project_name: ${{ vars.PROJECT_NAME }}
|
|
66
73
|
TF_VAR_environment: ${{ inputs.environment }}
|
package/core.version
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
0.41.
|
|
1
|
+
0.41.3
|