@pulumi/github 5.3.0-alpha.1674068358 → 5.3.0

package/actionsEnvironmentSecret.d.ts

@@ -62,7 +62,7 @@ export declare class ActionsEnvironmentSecret extends pulumi.CustomResource {
      */
     readonly createdAt: pulumi.Output<string>;
     /**
-     * Encrypted value of the secret using the Github public key in Base64 format.
+     * Encrypted value of the secret using the GitHub public key in Base64 format.
      */
     readonly encryptedValue: pulumi.Output<string | undefined>;
     /**
@@ -103,7 +103,7 @@ export interface ActionsEnvironmentSecretState {
      */
     createdAt?: pulumi.Input<string>;
     /**
-     * Encrypted value of the secret using the Github public key in Base64 format.
+     * Encrypted value of the secret using the GitHub public key in Base64 format.
      */
     encryptedValue?: pulumi.Input<string>;
     /**
@@ -132,7 +132,7 @@ export interface ActionsEnvironmentSecretState {
  */
 export interface ActionsEnvironmentSecretArgs {
     /**
-     * Encrypted value of the secret using the Github public key in Base64 format.
+     * Encrypted value of the secret using the GitHub public key in Base64 format.
      */
     encryptedValue?: pulumi.Input<string>;
     /**

package/actionsOrganizationOidcSubjectClaimCustomizationTemplate.d.ts

@@ -0,0 +1,76 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * This resource allows you to create and manage an OpenID Connect subject claim customization template within a GitHub
+ * organization.
+ *
+ * More information on integrating GitHub with cloud providers using OpenID Connect and a list of available claims is
+ * available in the [Actions documentation](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect).
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as github from "@pulumi/github";
+ *
+ * const exampleTemplate = new github.ActionsOrganizationOidcSubjectClaimCustomizationTemplate("exampleTemplate", {includeClaimKeys: [
+ *     "actor",
+ *     "context",
+ *     "repository_owner",
+ * ]});
+ * ```
+ *
+ * ## Import
+ *
+ * This resource can be imported using the organization's name.
+ *
+ * ```sh
+ *  $ pulumi import github:index/actionsOrganizationOidcSubjectClaimCustomizationTemplate:ActionsOrganizationOidcSubjectClaimCustomizationTemplate test example_organization
+ * ```
+ */
+export declare class ActionsOrganizationOidcSubjectClaimCustomizationTemplate extends pulumi.CustomResource {
+    /**
+     * Get an existing ActionsOrganizationOidcSubjectClaimCustomizationTemplate resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ActionsOrganizationOidcSubjectClaimCustomizationTemplateState, opts?: pulumi.CustomResourceOptions): ActionsOrganizationOidcSubjectClaimCustomizationTemplate;
+    /**
+     * Returns true if the given object is an instance of ActionsOrganizationOidcSubjectClaimCustomizationTemplate.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is ActionsOrganizationOidcSubjectClaimCustomizationTemplate;
+    /**
+     * A list of OpenID Connect claims.
+     */
+    readonly includeClaimKeys: pulumi.Output<string[]>;
+    /**
+     * Create a ActionsOrganizationOidcSubjectClaimCustomizationTemplate resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: ActionsOrganizationOidcSubjectClaimCustomizationTemplateArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering ActionsOrganizationOidcSubjectClaimCustomizationTemplate resources.
+ */
+export interface ActionsOrganizationOidcSubjectClaimCustomizationTemplateState {
+    /**
+     * A list of OpenID Connect claims.
+     */
+    includeClaimKeys?: pulumi.Input<pulumi.Input<string>[]>;
+}
+/**
+ * The set of arguments for constructing a ActionsOrganizationOidcSubjectClaimCustomizationTemplate resource.
+ */
+export interface ActionsOrganizationOidcSubjectClaimCustomizationTemplateArgs {
+    /**
+     * A list of OpenID Connect claims.
+     */
+    includeClaimKeys: pulumi.Input<pulumi.Input<string>[]>;
+}

package/actionsOrganizationOidcSubjectClaimCustomizationTemplate.js

@@ -0,0 +1,80 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ActionsOrganizationOidcSubjectClaimCustomizationTemplate = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+/**
+ * This resource allows you to create and manage an OpenID Connect subject claim customization template within a GitHub
+ * organization.
+ *
+ * More information on integrating GitHub with cloud providers using OpenID Connect and a list of available claims is
+ * available in the [Actions documentation](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect).
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as github from "@pulumi/github";
+ *
+ * const exampleTemplate = new github.ActionsOrganizationOidcSubjectClaimCustomizationTemplate("exampleTemplate", {includeClaimKeys: [
+ *     "actor",
+ *     "context",
+ *     "repository_owner",
+ * ]});
+ * ```
+ *
+ * ## Import
+ *
+ * This resource can be imported using the organization's name.
+ *
+ * ```sh
+ *  $ pulumi import github:index/actionsOrganizationOidcSubjectClaimCustomizationTemplate:ActionsOrganizationOidcSubjectClaimCustomizationTemplate test example_organization
+ * ```
+ */
+class ActionsOrganizationOidcSubjectClaimCustomizationTemplate extends pulumi.CustomResource {
+    /**
+     * Get an existing ActionsOrganizationOidcSubjectClaimCustomizationTemplate resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new ActionsOrganizationOidcSubjectClaimCustomizationTemplate(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of ActionsOrganizationOidcSubjectClaimCustomizationTemplate.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === ActionsOrganizationOidcSubjectClaimCustomizationTemplate.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["includeClaimKeys"] = state ? state.includeClaimKeys : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.includeClaimKeys === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'includeClaimKeys'");
+            }
+            resourceInputs["includeClaimKeys"] = args ? args.includeClaimKeys : undefined;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(ActionsOrganizationOidcSubjectClaimCustomizationTemplate.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.ActionsOrganizationOidcSubjectClaimCustomizationTemplate = ActionsOrganizationOidcSubjectClaimCustomizationTemplate;
+/** @internal */
+ActionsOrganizationOidcSubjectClaimCustomizationTemplate.__pulumiType = 'github:index/actionsOrganizationOidcSubjectClaimCustomizationTemplate:ActionsOrganizationOidcSubjectClaimCustomizationTemplate';
+//# sourceMappingURL=actionsOrganizationOidcSubjectClaimCustomizationTemplate.js.map

package/actionsOrganizationOidcSubjectClaimCustomizationTemplate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actionsOrganizationOidcSubjectClaimCustomizationTemplate.js","sourceRoot":"","sources":["../actionsOrganizationOidcSubjectClaimCustomizationTemplate.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAa,wDAAyD,SAAQ,MAAM,CAAC,cAAc;IAC/F;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAqE,EAAE,IAAmC;QACnK,OAAO,IAAI,wDAAwD,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC/G,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,wDAAwD,CAAC,YAAY,CAAC;IACzG,CAAC;IAeD,YAAY,IAAY,EAAE,WAA0I,EAAE,IAAmC;QACrM,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAwF,CAAC;YACvG,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;SACnF;aAAM;YACH,MAAM,IAAI,GAAG,WAAuF,CAAC;YACrG,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC7D,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;aACnE;YACD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;SACjF;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,wDAAwD,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC7G,CAAC;;AAxDL,4HAyDC;AA3CG,gBAAgB;AACO,qEAAY,GAAG,gIAAgI,CAAC"}

package/actionsOrganizationSecret.d.ts

@@ -70,7 +70,7 @@ export declare class ActionsOrganizationSecret extends pulumi.CustomResource {
      */
     readonly createdAt: pulumi.Output<string>;
     /**
-     * Encrypted value of the secret using the Github public key in Base64 format.
+     * Encrypted value of the secret using the GitHub public key in Base64 format.
      */
     readonly encryptedValue: pulumi.Output<string | undefined>;
     /**
@@ -112,7 +112,7 @@ export interface ActionsOrganizationSecretState {
      */
     createdAt?: pulumi.Input<string>;
     /**
-     * Encrypted value of the secret using the Github public key in Base64 format.
+     * Encrypted value of the secret using the GitHub public key in Base64 format.
      */
     encryptedValue?: pulumi.Input<string>;
     /**
@@ -142,7 +142,7 @@ export interface ActionsOrganizationSecretState {
  */
 export interface ActionsOrganizationSecretArgs {
     /**
-     * Encrypted value of the secret using the Github public key in Base64 format.
+     * Encrypted value of the secret using the GitHub public key in Base64 format.
      */
     encryptedValue?: pulumi.Input<string>;
     /**

package/actionsRepositoryAccessLevel.d.ts

@@ -0,0 +1,85 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * This resource allows you to set the access level of a non-public repositories actions and reusable workflows for use in other repositories.
+ * You must have admin access to a repository to use this resource.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as github from "@pulumi/github";
+ *
+ * const example = new github.Repository("example", {visibility: "private"});
+ * const test = new github.ActionsRepositoryAccessLevel("test", {
+ *     accessLevel: "user",
+ *     repository: example.name,
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * This resource can be imported using the name of the GitHub repository
+ *
+ * ```sh
+ *  $ pulumi import github:index/actionsRepositoryAccessLevel:ActionsRepositoryAccessLevel test <github_repository_name>
+ * ```
+ */
+export declare class ActionsRepositoryAccessLevel extends pulumi.CustomResource {
+    /**
+     * Get an existing ActionsRepositoryAccessLevel resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ActionsRepositoryAccessLevelState, opts?: pulumi.CustomResourceOptions): ActionsRepositoryAccessLevel;
+    /**
+     * Returns true if the given object is an instance of ActionsRepositoryAccessLevel.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is ActionsRepositoryAccessLevel;
+    /**
+     * Where the actions or reusable workflows of the repository may be used. Possible values are `none`, `user`, `organization`, or `enterprise`.
+     */
+    readonly accessLevel: pulumi.Output<string>;
+    /**
+     * The GitHub repository
+     */
+    readonly repository: pulumi.Output<string>;
+    /**
+     * Create a ActionsRepositoryAccessLevel resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: ActionsRepositoryAccessLevelArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering ActionsRepositoryAccessLevel resources.
+ */
+export interface ActionsRepositoryAccessLevelState {
+    /**
+     * Where the actions or reusable workflows of the repository may be used. Possible values are `none`, `user`, `organization`, or `enterprise`.
+     */
+    accessLevel?: pulumi.Input<string>;
+    /**
+     * The GitHub repository
+     */
+    repository?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a ActionsRepositoryAccessLevel resource.
+ */
+export interface ActionsRepositoryAccessLevelArgs {
+    /**
+     * Where the actions or reusable workflows of the repository may be used. Possible values are `none`, `user`, `organization`, or `enterprise`.
+     */
+    accessLevel: pulumi.Input<string>;
+    /**
+     * The GitHub repository
+     */
+    repository: pulumi.Input<string>;
+}

package/actionsRepositoryAccessLevel.js

@@ -0,0 +1,82 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ActionsRepositoryAccessLevel = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+/**
+ * This resource allows you to set the access level of a non-public repositories actions and reusable workflows for use in other repositories.
+ * You must have admin access to a repository to use this resource.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as github from "@pulumi/github";
+ *
+ * const example = new github.Repository("example", {visibility: "private"});
+ * const test = new github.ActionsRepositoryAccessLevel("test", {
+ *     accessLevel: "user",
+ *     repository: example.name,
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * This resource can be imported using the name of the GitHub repository
+ *
+ * ```sh
+ *  $ pulumi import github:index/actionsRepositoryAccessLevel:ActionsRepositoryAccessLevel test <github_repository_name>
+ * ```
+ */
+class ActionsRepositoryAccessLevel extends pulumi.CustomResource {
+    /**
+     * Get an existing ActionsRepositoryAccessLevel resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new ActionsRepositoryAccessLevel(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of ActionsRepositoryAccessLevel.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === ActionsRepositoryAccessLevel.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["accessLevel"] = state ? state.accessLevel : undefined;
+            resourceInputs["repository"] = state ? state.repository : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.accessLevel === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'accessLevel'");
+            }
+            if ((!args || args.repository === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'repository'");
+            }
+            resourceInputs["accessLevel"] = args ? args.accessLevel : undefined;
+            resourceInputs["repository"] = args ? args.repository : undefined;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(ActionsRepositoryAccessLevel.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.ActionsRepositoryAccessLevel = ActionsRepositoryAccessLevel;
+/** @internal */
+ActionsRepositoryAccessLevel.__pulumiType = 'github:index/actionsRepositoryAccessLevel:ActionsRepositoryAccessLevel';
+//# sourceMappingURL=actionsRepositoryAccessLevel.js.map

package/actionsRepositoryAccessLevel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actionsRepositoryAccessLevel.js","sourceRoot":"","sources":["../actionsRepositoryAccessLevel.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAa,4BAA6B,SAAQ,MAAM,CAAC,cAAc;IACnE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAyC,EAAE,IAAmC;QACvI,OAAO,IAAI,4BAA4B,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACnF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,4BAA4B,CAAC,YAAY,CAAC;IAC7E,CAAC;IAmBD,YAAY,IAAY,EAAE,WAAkF,EAAE,IAAmC;QAC7I,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA4D,CAAC;YAC3E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SACvE;aAAM;YACH,MAAM,IAAI,GAAG,WAA2D,CAAC;YACzE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SACrE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,4BAA4B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACjF,CAAC;;AAjEL,oEAkEC;AApDG,gBAAgB;AACO,yCAAY,GAAG,wEAAwE,CAAC"}

package/actionsRepositoryOidcSubjectClaimCustomizationTemplate.d.ts

@@ -0,0 +1,107 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * This resource allows you to create and manage an OpenID Connect subject claim customization template for a GitHub
+ * repository.
+ *
+ * More information on integrating GitHub with cloud providers using OpenID Connect and a list of available claims is
+ * available in the [Actions documentation](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect).
+ *
+ * The following table lists the behaviour of `useDefault`:
+ *
+ * | `useDefault` | `includeClaimKeys` | Template used                                             |
+ * |---------------|----------------------|-----------------------------------------------------------|
+ * | `true`        | Unset                | GitHub's default                                          |
+ * | `false`       | Set                  | `includeClaimKeys`                                      |
+ * | `false`       | Unset                | Organization's default if set, otherwise GitHub's default |
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as github from "@pulumi/github";
+ *
+ * const example = new github.Repository("example", {});
+ * const exampleTemplate = new github.ActionsRepositoryOidcSubjectClaimCustomizationTemplate("exampleTemplate", {
+ *     repository: example.name,
+ *     useDefault: false,
+ *     includeClaimKeys: [
+ *         "actor",
+ *         "context",
+ *         "repository_owner",
+ *     ],
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * This resource can be imported using the repository's name.
+ *
+ * ```sh
+ *  $ pulumi import github:index/actionsRepositoryOidcSubjectClaimCustomizationTemplate:ActionsRepositoryOidcSubjectClaimCustomizationTemplate test example_repository
+ * ```
+ */
+export declare class ActionsRepositoryOidcSubjectClaimCustomizationTemplate extends pulumi.CustomResource {
+    /**
+     * Get an existing ActionsRepositoryOidcSubjectClaimCustomizationTemplate resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ActionsRepositoryOidcSubjectClaimCustomizationTemplateState, opts?: pulumi.CustomResourceOptions): ActionsRepositoryOidcSubjectClaimCustomizationTemplate;
+    /**
+     * Returns true if the given object is an instance of ActionsRepositoryOidcSubjectClaimCustomizationTemplate.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is ActionsRepositoryOidcSubjectClaimCustomizationTemplate;
+    /**
+     * A list of OpenID Connect claims.
+     */
+    readonly includeClaimKeys: pulumi.Output<string[] | undefined>;
+    readonly repository: pulumi.Output<string>;
+    /**
+     * Whether to use the default template or not. If `true`, `includeClaimKeys` must not
+     * be set.
+     */
+    readonly useDefault: pulumi.Output<boolean>;
+    /**
+     * Create a ActionsRepositoryOidcSubjectClaimCustomizationTemplate resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: ActionsRepositoryOidcSubjectClaimCustomizationTemplateArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering ActionsRepositoryOidcSubjectClaimCustomizationTemplate resources.
+ */
+export interface ActionsRepositoryOidcSubjectClaimCustomizationTemplateState {
+    /**
+     * A list of OpenID Connect claims.
+     */
+    includeClaimKeys?: pulumi.Input<pulumi.Input<string>[]>;
+    repository?: pulumi.Input<string>;
+    /**
+     * Whether to use the default template or not. If `true`, `includeClaimKeys` must not
+     * be set.
+     */
+    useDefault?: pulumi.Input<boolean>;
+}
+/**
+ * The set of arguments for constructing a ActionsRepositoryOidcSubjectClaimCustomizationTemplate resource.
+ */
+export interface ActionsRepositoryOidcSubjectClaimCustomizationTemplateArgs {
+    /**
+     * A list of OpenID Connect claims.
+     */
+    includeClaimKeys?: pulumi.Input<pulumi.Input<string>[]>;
+    repository: pulumi.Input<string>;
+    /**
+     * Whether to use the default template or not. If `true`, `includeClaimKeys` must not
+     * be set.
+     */
+    useDefault: pulumi.Input<boolean>;
+}

package/actionsRepositoryOidcSubjectClaimCustomizationTemplate.js

@@ -0,0 +1,100 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ActionsRepositoryOidcSubjectClaimCustomizationTemplate = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+/**
+ * This resource allows you to create and manage an OpenID Connect subject claim customization template for a GitHub
+ * repository.
+ *
+ * More information on integrating GitHub with cloud providers using OpenID Connect and a list of available claims is
+ * available in the [Actions documentation](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect).
+ *
+ * The following table lists the behaviour of `useDefault`:
+ *
+ * | `useDefault` | `includeClaimKeys` | Template used                                             |
+ * |---------------|----------------------|-----------------------------------------------------------|
+ * | `true`        | Unset                | GitHub's default                                          |
+ * | `false`       | Set                  | `includeClaimKeys`                                      |
+ * | `false`       | Unset                | Organization's default if set, otherwise GitHub's default |
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as github from "@pulumi/github";
+ *
+ * const example = new github.Repository("example", {});
+ * const exampleTemplate = new github.ActionsRepositoryOidcSubjectClaimCustomizationTemplate("exampleTemplate", {
+ *     repository: example.name,
+ *     useDefault: false,
+ *     includeClaimKeys: [
+ *         "actor",
+ *         "context",
+ *         "repository_owner",
+ *     ],
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * This resource can be imported using the repository's name.
+ *
+ * ```sh
+ *  $ pulumi import github:index/actionsRepositoryOidcSubjectClaimCustomizationTemplate:ActionsRepositoryOidcSubjectClaimCustomizationTemplate test example_repository
+ * ```
+ */
+class ActionsRepositoryOidcSubjectClaimCustomizationTemplate extends pulumi.CustomResource {
+    /**
+     * Get an existing ActionsRepositoryOidcSubjectClaimCustomizationTemplate resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new ActionsRepositoryOidcSubjectClaimCustomizationTemplate(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of ActionsRepositoryOidcSubjectClaimCustomizationTemplate.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === ActionsRepositoryOidcSubjectClaimCustomizationTemplate.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["includeClaimKeys"] = state ? state.includeClaimKeys : undefined;
+            resourceInputs["repository"] = state ? state.repository : undefined;
+            resourceInputs["useDefault"] = state ? state.useDefault : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.repository === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'repository'");
+            }
+            if ((!args || args.useDefault === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'useDefault'");
+            }
+            resourceInputs["includeClaimKeys"] = args ? args.includeClaimKeys : undefined;
+            resourceInputs["repository"] = args ? args.repository : undefined;
+            resourceInputs["useDefault"] = args ? args.useDefault : undefined;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(ActionsRepositoryOidcSubjectClaimCustomizationTemplate.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.ActionsRepositoryOidcSubjectClaimCustomizationTemplate = ActionsRepositoryOidcSubjectClaimCustomizationTemplate;
+/** @internal */
+ActionsRepositoryOidcSubjectClaimCustomizationTemplate.__pulumiType = 'github:index/actionsRepositoryOidcSubjectClaimCustomizationTemplate:ActionsRepositoryOidcSubjectClaimCustomizationTemplate';
+//# sourceMappingURL=actionsRepositoryOidcSubjectClaimCustomizationTemplate.js.map

package/actionsRepositoryOidcSubjectClaimCustomizationTemplate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actionsRepositoryOidcSubjectClaimCustomizationTemplate.js","sourceRoot":"","sources":["../actionsRepositoryOidcSubjectClaimCustomizationTemplate.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAa,sDAAuD,SAAQ,MAAM,CAAC,cAAc;IAC7F;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmE,EAAE,IAAmC;QACjK,OAAO,IAAI,sDAAsD,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC7G,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,sDAAsD,CAAC,YAAY,CAAC;IACvG,CAAC;IAqBD,YAAY,IAAY,EAAE,WAAsI,EAAE,IAAmC;QACjM,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsF,CAAC;YACrG,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SACvE;aAAM;YACH,MAAM,IAAI,GAAG,WAAqF,CAAC;YACnG,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SACrE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,sDAAsD,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3G,CAAC;;AArEL,wHAsEC;AAxDG,gBAAgB;AACO,mEAAY,GAAG,4HAA4H,CAAC"}

package/actionsRunnerGroup.d.ts

@@ -60,18 +60,26 @@ export declare class ActionsRunnerGroup extends pulumi.CustomResource {
      * Name of the runner group
      */
     readonly name: pulumi.Output<string>;
+    /**
+     * If true, the runner group will be restricted to running only the workflows specified in the selectedWorkflows array. Defaults to false.
+     */
+    readonly restrictedToWorkflows: pulumi.Output<boolean>;
     /**
      * The GitHub API URL for the runner group's runners
      */
     readonly runnersUrl: pulumi.Output<string>;
     /**
-     * Github API URL for the runner group's repositories
+     * GitHub API URL for the runner group's repositories
      */
     readonly selectedRepositoriesUrl: pulumi.Output<string>;
     /**
      * IDs of the repositories which should be added to the runner group
      */
     readonly selectedRepositoryIds: pulumi.Output<number[] | undefined>;
+    /**
+     * List of workflows the runner group should be allowed to run. This setting will be ignored unless restrictedToWorkflows is set to true.
+     */
+    readonly selectedWorkflows: pulumi.Output<string[]>;
     /**
      * Visibility of a runner group. Whether the runner group can include `all`, `selected`, or `private` repositories. A value of `private` is not currently supported due to limitations in the GitHub API.
      */
@@ -109,18 +117,26 @@ export interface ActionsRunnerGroupState {
      * Name of the runner group
      */
     name?: pulumi.Input<string>;
+    /**
+     * If true, the runner group will be restricted to running only the workflows specified in the selectedWorkflows array. Defaults to false.
+     */
+    restrictedToWorkflows?: pulumi.Input<boolean>;
     /**
      * The GitHub API URL for the runner group's runners
      */
     runnersUrl?: pulumi.Input<string>;
     /**
-     * Github API URL for the runner group's repositories
+     * GitHub API URL for the runner group's repositories
      */
     selectedRepositoriesUrl?: pulumi.Input<string>;
     /**
      * IDs of the repositories which should be added to the runner group
      */
     selectedRepositoryIds?: pulumi.Input<pulumi.Input<number>[]>;
+    /**
+     * List of workflows the runner group should be allowed to run. This setting will be ignored unless restrictedToWorkflows is set to true.
+     */
+    selectedWorkflows?: pulumi.Input<pulumi.Input<string>[]>;
     /**
      * Visibility of a runner group. Whether the runner group can include `all`, `selected`, or `private` repositories. A value of `private` is not currently supported due to limitations in the GitHub API.
      */