pulumi-github 6.11.0a1768542226__py3-none-any.whl → 6.12.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_github/__init__.py +37 -0
- pulumi_github/_inputs.py +527 -34
- pulumi_github/actions_environment_secret.py +141 -12
- pulumi_github/actions_environment_variable.py +73 -39
- pulumi_github/actions_organization_permissions.py +50 -3
- pulumi_github/actions_organization_secret.py +164 -55
- pulumi_github/actions_organization_secret_repositories.py +44 -28
- pulumi_github/actions_organization_secret_repository.py +44 -28
- pulumi_github/actions_organization_variable.py +44 -47
- pulumi_github/actions_organization_variable_repositories.py +262 -0
- pulumi_github/actions_organization_variable_repository.py +262 -0
- pulumi_github/actions_organization_workflow_permissions.py +320 -0
- pulumi_github/actions_repository_permissions.py +50 -3
- pulumi_github/actions_secret.py +176 -41
- pulumi_github/actions_variable.py +65 -33
- pulumi_github/app_installation_repositories.py +6 -6
- pulumi_github/app_installation_repository.py +6 -6
- pulumi_github/dependabot_organization_secret.py +128 -59
- pulumi_github/dependabot_organization_secret_repositories.py +44 -36
- pulumi_github/dependabot_organization_secret_repository.py +262 -0
- pulumi_github/dependabot_secret.py +154 -41
- pulumi_github/emu_group_mapping.py +62 -6
- pulumi_github/get_ip_ranges.py +3 -0
- pulumi_github/get_release_asset.py +370 -0
- pulumi_github/get_repository.py +17 -2
- pulumi_github/get_team.py +29 -13
- pulumi_github/organization_ruleset.py +11 -17
- pulumi_github/outputs.py +404 -25
- pulumi_github/pulumi-plugin.json +1 -1
- pulumi_github/repository.py +88 -23
- pulumi_github/repository_custom_property.py +2 -2
- pulumi_github/repository_environment.py +11 -11
- pulumi_github/repository_environment_deployment_policy.py +4 -4
- pulumi_github/repository_ruleset.py +7 -7
- pulumi_github/team.py +70 -21
- {pulumi_github-6.11.0a1768542226.dist-info → pulumi_github-6.12.0.dist-info}/METADATA +1 -1
- {pulumi_github-6.11.0a1768542226.dist-info → pulumi_github-6.12.0.dist-info}/RECORD +39 -34
- {pulumi_github-6.11.0a1768542226.dist-info → pulumi_github-6.12.0.dist-info}/WHEEL +1 -1
- {pulumi_github-6.11.0a1768542226.dist-info → pulumi_github-6.12.0.dist-info}/top_level.txt +0 -0
|
@@ -0,0 +1,320 @@
|
|
|
1
|
+
# coding=utf-8
|
|
2
|
+
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
|
+
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
|
+
|
|
5
|
+
import builtins as _builtins
|
|
6
|
+
import warnings
|
|
7
|
+
import sys
|
|
8
|
+
import pulumi
|
|
9
|
+
import pulumi.runtime
|
|
10
|
+
from typing import Any, Mapping, Optional, Sequence, Union, overload
|
|
11
|
+
if sys.version_info >= (3, 11):
|
|
12
|
+
from typing import NotRequired, TypedDict, TypeAlias
|
|
13
|
+
else:
|
|
14
|
+
from typing_extensions import NotRequired, TypedDict, TypeAlias
|
|
15
|
+
from . import _utilities
|
|
16
|
+
|
|
17
|
+
__all__ = ['ActionsOrganizationWorkflowPermissionsArgs', 'ActionsOrganizationWorkflowPermissions']
|
|
18
|
+
|
|
19
|
+
@pulumi.input_type
|
|
20
|
+
class ActionsOrganizationWorkflowPermissionsArgs:
|
|
21
|
+
def __init__(__self__, *,
|
|
22
|
+
organization_slug: pulumi.Input[_builtins.str],
|
|
23
|
+
can_approve_pull_request_reviews: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
24
|
+
default_workflow_permissions: Optional[pulumi.Input[_builtins.str]] = None):
|
|
25
|
+
"""
|
|
26
|
+
The set of arguments for constructing a ActionsOrganizationWorkflowPermissions resource.
|
|
27
|
+
:param pulumi.Input[_builtins.str] organization_slug: The slug of the organization.
|
|
28
|
+
:param pulumi.Input[_builtins.bool] can_approve_pull_request_reviews: Whether GitHub Actions can approve pull request reviews. Defaults to `false`.
|
|
29
|
+
:param pulumi.Input[_builtins.str] default_workflow_permissions: The default workflow permissions granted to the GITHUB_TOKEN when running workflows. Can be `read` or `write`. Defaults to `read`.
|
|
30
|
+
"""
|
|
31
|
+
pulumi.set(__self__, "organization_slug", organization_slug)
|
|
32
|
+
if can_approve_pull_request_reviews is not None:
|
|
33
|
+
pulumi.set(__self__, "can_approve_pull_request_reviews", can_approve_pull_request_reviews)
|
|
34
|
+
if default_workflow_permissions is not None:
|
|
35
|
+
pulumi.set(__self__, "default_workflow_permissions", default_workflow_permissions)
|
|
36
|
+
|
|
37
|
+
@_builtins.property
|
|
38
|
+
@pulumi.getter(name="organizationSlug")
|
|
39
|
+
def organization_slug(self) -> pulumi.Input[_builtins.str]:
|
|
40
|
+
"""
|
|
41
|
+
The slug of the organization.
|
|
42
|
+
"""
|
|
43
|
+
return pulumi.get(self, "organization_slug")
|
|
44
|
+
|
|
45
|
+
@organization_slug.setter
|
|
46
|
+
def organization_slug(self, value: pulumi.Input[_builtins.str]):
|
|
47
|
+
pulumi.set(self, "organization_slug", value)
|
|
48
|
+
|
|
49
|
+
@_builtins.property
|
|
50
|
+
@pulumi.getter(name="canApprovePullRequestReviews")
|
|
51
|
+
def can_approve_pull_request_reviews(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
52
|
+
"""
|
|
53
|
+
Whether GitHub Actions can approve pull request reviews. Defaults to `false`.
|
|
54
|
+
"""
|
|
55
|
+
return pulumi.get(self, "can_approve_pull_request_reviews")
|
|
56
|
+
|
|
57
|
+
@can_approve_pull_request_reviews.setter
|
|
58
|
+
def can_approve_pull_request_reviews(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
59
|
+
pulumi.set(self, "can_approve_pull_request_reviews", value)
|
|
60
|
+
|
|
61
|
+
@_builtins.property
|
|
62
|
+
@pulumi.getter(name="defaultWorkflowPermissions")
|
|
63
|
+
def default_workflow_permissions(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
64
|
+
"""
|
|
65
|
+
The default workflow permissions granted to the GITHUB_TOKEN when running workflows. Can be `read` or `write`. Defaults to `read`.
|
|
66
|
+
"""
|
|
67
|
+
return pulumi.get(self, "default_workflow_permissions")
|
|
68
|
+
|
|
69
|
+
@default_workflow_permissions.setter
|
|
70
|
+
def default_workflow_permissions(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
71
|
+
pulumi.set(self, "default_workflow_permissions", value)
|
|
72
|
+
|
|
73
|
+
|
|
74
|
+
@pulumi.input_type
|
|
75
|
+
class _ActionsOrganizationWorkflowPermissionsState:
|
|
76
|
+
def __init__(__self__, *,
|
|
77
|
+
can_approve_pull_request_reviews: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
78
|
+
default_workflow_permissions: Optional[pulumi.Input[_builtins.str]] = None,
|
|
79
|
+
organization_slug: Optional[pulumi.Input[_builtins.str]] = None):
|
|
80
|
+
"""
|
|
81
|
+
Input properties used for looking up and filtering ActionsOrganizationWorkflowPermissions resources.
|
|
82
|
+
:param pulumi.Input[_builtins.bool] can_approve_pull_request_reviews: Whether GitHub Actions can approve pull request reviews. Defaults to `false`.
|
|
83
|
+
:param pulumi.Input[_builtins.str] default_workflow_permissions: The default workflow permissions granted to the GITHUB_TOKEN when running workflows. Can be `read` or `write`. Defaults to `read`.
|
|
84
|
+
:param pulumi.Input[_builtins.str] organization_slug: The slug of the organization.
|
|
85
|
+
"""
|
|
86
|
+
if can_approve_pull_request_reviews is not None:
|
|
87
|
+
pulumi.set(__self__, "can_approve_pull_request_reviews", can_approve_pull_request_reviews)
|
|
88
|
+
if default_workflow_permissions is not None:
|
|
89
|
+
pulumi.set(__self__, "default_workflow_permissions", default_workflow_permissions)
|
|
90
|
+
if organization_slug is not None:
|
|
91
|
+
pulumi.set(__self__, "organization_slug", organization_slug)
|
|
92
|
+
|
|
93
|
+
@_builtins.property
|
|
94
|
+
@pulumi.getter(name="canApprovePullRequestReviews")
|
|
95
|
+
def can_approve_pull_request_reviews(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
96
|
+
"""
|
|
97
|
+
Whether GitHub Actions can approve pull request reviews. Defaults to `false`.
|
|
98
|
+
"""
|
|
99
|
+
return pulumi.get(self, "can_approve_pull_request_reviews")
|
|
100
|
+
|
|
101
|
+
@can_approve_pull_request_reviews.setter
|
|
102
|
+
def can_approve_pull_request_reviews(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
103
|
+
pulumi.set(self, "can_approve_pull_request_reviews", value)
|
|
104
|
+
|
|
105
|
+
@_builtins.property
|
|
106
|
+
@pulumi.getter(name="defaultWorkflowPermissions")
|
|
107
|
+
def default_workflow_permissions(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
108
|
+
"""
|
|
109
|
+
The default workflow permissions granted to the GITHUB_TOKEN when running workflows. Can be `read` or `write`. Defaults to `read`.
|
|
110
|
+
"""
|
|
111
|
+
return pulumi.get(self, "default_workflow_permissions")
|
|
112
|
+
|
|
113
|
+
@default_workflow_permissions.setter
|
|
114
|
+
def default_workflow_permissions(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
115
|
+
pulumi.set(self, "default_workflow_permissions", value)
|
|
116
|
+
|
|
117
|
+
@_builtins.property
|
|
118
|
+
@pulumi.getter(name="organizationSlug")
|
|
119
|
+
def organization_slug(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
120
|
+
"""
|
|
121
|
+
The slug of the organization.
|
|
122
|
+
"""
|
|
123
|
+
return pulumi.get(self, "organization_slug")
|
|
124
|
+
|
|
125
|
+
@organization_slug.setter
|
|
126
|
+
def organization_slug(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
127
|
+
pulumi.set(self, "organization_slug", value)
|
|
128
|
+
|
|
129
|
+
|
|
130
|
+
@pulumi.type_token("github:index/actionsOrganizationWorkflowPermissions:ActionsOrganizationWorkflowPermissions")
|
|
131
|
+
class ActionsOrganizationWorkflowPermissions(pulumi.CustomResource):
|
|
132
|
+
@overload
|
|
133
|
+
def __init__(__self__,
|
|
134
|
+
resource_name: str,
|
|
135
|
+
opts: Optional[pulumi.ResourceOptions] = None,
|
|
136
|
+
can_approve_pull_request_reviews: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
137
|
+
default_workflow_permissions: Optional[pulumi.Input[_builtins.str]] = None,
|
|
138
|
+
organization_slug: Optional[pulumi.Input[_builtins.str]] = None,
|
|
139
|
+
__props__=None):
|
|
140
|
+
"""
|
|
141
|
+
This resource allows you to manage GitHub Actions workflow permissions for a GitHub Organization account. This controls the default permissions granted to the GITHUB_TOKEN when running workflows and whether GitHub Actions can approve pull request reviews.
|
|
142
|
+
|
|
143
|
+
You must have organization admin access to use this resource.
|
|
144
|
+
|
|
145
|
+
## Example Usage
|
|
146
|
+
|
|
147
|
+
```python
|
|
148
|
+
import pulumi
|
|
149
|
+
import pulumi_github as github
|
|
150
|
+
|
|
151
|
+
# Basic workflow permissions configuration
|
|
152
|
+
example = github.ActionsOrganizationWorkflowPermissions("example",
|
|
153
|
+
organization_slug="my-organization",
|
|
154
|
+
default_workflow_permissions="read",
|
|
155
|
+
can_approve_pull_request_reviews=False)
|
|
156
|
+
# Allow write permissions and PR approvals
|
|
157
|
+
permissive = github.ActionsOrganizationWorkflowPermissions("permissive",
|
|
158
|
+
organization_slug="my-organization",
|
|
159
|
+
default_workflow_permissions="write",
|
|
160
|
+
can_approve_pull_request_reviews=True)
|
|
161
|
+
```
|
|
162
|
+
|
|
163
|
+
## Notes
|
|
164
|
+
|
|
165
|
+
> **Note:** This resource requires a GitHub Organization account and organization admin permissions.
|
|
166
|
+
|
|
167
|
+
When this resource is destroyed, the workflow permissions will be reset to safe defaults:
|
|
168
|
+
|
|
169
|
+
* `default_workflow_permissions` = `read`
|
|
170
|
+
* `can_approve_pull_request_reviews` = `false`
|
|
171
|
+
|
|
172
|
+
## Import
|
|
173
|
+
|
|
174
|
+
Organization Actions workflow permissions can be imported using the organization slug:
|
|
175
|
+
|
|
176
|
+
```sh
|
|
177
|
+
$ pulumi import github:index/actionsOrganizationWorkflowPermissions:ActionsOrganizationWorkflowPermissions example my-organization
|
|
178
|
+
```
|
|
179
|
+
|
|
180
|
+
:param str resource_name: The name of the resource.
|
|
181
|
+
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
182
|
+
:param pulumi.Input[_builtins.bool] can_approve_pull_request_reviews: Whether GitHub Actions can approve pull request reviews. Defaults to `false`.
|
|
183
|
+
:param pulumi.Input[_builtins.str] default_workflow_permissions: The default workflow permissions granted to the GITHUB_TOKEN when running workflows. Can be `read` or `write`. Defaults to `read`.
|
|
184
|
+
:param pulumi.Input[_builtins.str] organization_slug: The slug of the organization.
|
|
185
|
+
"""
|
|
186
|
+
...
|
|
187
|
+
@overload
|
|
188
|
+
def __init__(__self__,
|
|
189
|
+
resource_name: str,
|
|
190
|
+
args: ActionsOrganizationWorkflowPermissionsArgs,
|
|
191
|
+
opts: Optional[pulumi.ResourceOptions] = None):
|
|
192
|
+
"""
|
|
193
|
+
This resource allows you to manage GitHub Actions workflow permissions for a GitHub Organization account. This controls the default permissions granted to the GITHUB_TOKEN when running workflows and whether GitHub Actions can approve pull request reviews.
|
|
194
|
+
|
|
195
|
+
You must have organization admin access to use this resource.
|
|
196
|
+
|
|
197
|
+
## Example Usage
|
|
198
|
+
|
|
199
|
+
```python
|
|
200
|
+
import pulumi
|
|
201
|
+
import pulumi_github as github
|
|
202
|
+
|
|
203
|
+
# Basic workflow permissions configuration
|
|
204
|
+
example = github.ActionsOrganizationWorkflowPermissions("example",
|
|
205
|
+
organization_slug="my-organization",
|
|
206
|
+
default_workflow_permissions="read",
|
|
207
|
+
can_approve_pull_request_reviews=False)
|
|
208
|
+
# Allow write permissions and PR approvals
|
|
209
|
+
permissive = github.ActionsOrganizationWorkflowPermissions("permissive",
|
|
210
|
+
organization_slug="my-organization",
|
|
211
|
+
default_workflow_permissions="write",
|
|
212
|
+
can_approve_pull_request_reviews=True)
|
|
213
|
+
```
|
|
214
|
+
|
|
215
|
+
## Notes
|
|
216
|
+
|
|
217
|
+
> **Note:** This resource requires a GitHub Organization account and organization admin permissions.
|
|
218
|
+
|
|
219
|
+
When this resource is destroyed, the workflow permissions will be reset to safe defaults:
|
|
220
|
+
|
|
221
|
+
* `default_workflow_permissions` = `read`
|
|
222
|
+
* `can_approve_pull_request_reviews` = `false`
|
|
223
|
+
|
|
224
|
+
## Import
|
|
225
|
+
|
|
226
|
+
Organization Actions workflow permissions can be imported using the organization slug:
|
|
227
|
+
|
|
228
|
+
```sh
|
|
229
|
+
$ pulumi import github:index/actionsOrganizationWorkflowPermissions:ActionsOrganizationWorkflowPermissions example my-organization
|
|
230
|
+
```
|
|
231
|
+
|
|
232
|
+
:param str resource_name: The name of the resource.
|
|
233
|
+
:param ActionsOrganizationWorkflowPermissionsArgs args: The arguments to use to populate this resource's properties.
|
|
234
|
+
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
235
|
+
"""
|
|
236
|
+
...
|
|
237
|
+
def __init__(__self__, resource_name: str, *args, **kwargs):
|
|
238
|
+
resource_args, opts = _utilities.get_resource_args_opts(ActionsOrganizationWorkflowPermissionsArgs, pulumi.ResourceOptions, *args, **kwargs)
|
|
239
|
+
if resource_args is not None:
|
|
240
|
+
__self__._internal_init(resource_name, opts, **resource_args.__dict__)
|
|
241
|
+
else:
|
|
242
|
+
__self__._internal_init(resource_name, *args, **kwargs)
|
|
243
|
+
|
|
244
|
+
def _internal_init(__self__,
|
|
245
|
+
resource_name: str,
|
|
246
|
+
opts: Optional[pulumi.ResourceOptions] = None,
|
|
247
|
+
can_approve_pull_request_reviews: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
248
|
+
default_workflow_permissions: Optional[pulumi.Input[_builtins.str]] = None,
|
|
249
|
+
organization_slug: Optional[pulumi.Input[_builtins.str]] = None,
|
|
250
|
+
__props__=None):
|
|
251
|
+
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
252
|
+
if not isinstance(opts, pulumi.ResourceOptions):
|
|
253
|
+
raise TypeError('Expected resource options to be a ResourceOptions instance')
|
|
254
|
+
if opts.id is None:
|
|
255
|
+
if __props__ is not None:
|
|
256
|
+
raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
|
|
257
|
+
__props__ = ActionsOrganizationWorkflowPermissionsArgs.__new__(ActionsOrganizationWorkflowPermissionsArgs)
|
|
258
|
+
|
|
259
|
+
__props__.__dict__["can_approve_pull_request_reviews"] = can_approve_pull_request_reviews
|
|
260
|
+
__props__.__dict__["default_workflow_permissions"] = default_workflow_permissions
|
|
261
|
+
if organization_slug is None and not opts.urn:
|
|
262
|
+
raise TypeError("Missing required property 'organization_slug'")
|
|
263
|
+
__props__.__dict__["organization_slug"] = organization_slug
|
|
264
|
+
super(ActionsOrganizationWorkflowPermissions, __self__).__init__(
|
|
265
|
+
'github:index/actionsOrganizationWorkflowPermissions:ActionsOrganizationWorkflowPermissions',
|
|
266
|
+
resource_name,
|
|
267
|
+
__props__,
|
|
268
|
+
opts)
|
|
269
|
+
|
|
270
|
+
@staticmethod
|
|
271
|
+
def get(resource_name: str,
|
|
272
|
+
id: pulumi.Input[str],
|
|
273
|
+
opts: Optional[pulumi.ResourceOptions] = None,
|
|
274
|
+
can_approve_pull_request_reviews: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
275
|
+
default_workflow_permissions: Optional[pulumi.Input[_builtins.str]] = None,
|
|
276
|
+
organization_slug: Optional[pulumi.Input[_builtins.str]] = None) -> 'ActionsOrganizationWorkflowPermissions':
|
|
277
|
+
"""
|
|
278
|
+
Get an existing ActionsOrganizationWorkflowPermissions resource's state with the given name, id, and optional extra
|
|
279
|
+
properties used to qualify the lookup.
|
|
280
|
+
|
|
281
|
+
:param str resource_name: The unique name of the resulting resource.
|
|
282
|
+
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
283
|
+
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
284
|
+
:param pulumi.Input[_builtins.bool] can_approve_pull_request_reviews: Whether GitHub Actions can approve pull request reviews. Defaults to `false`.
|
|
285
|
+
:param pulumi.Input[_builtins.str] default_workflow_permissions: The default workflow permissions granted to the GITHUB_TOKEN when running workflows. Can be `read` or `write`. Defaults to `read`.
|
|
286
|
+
:param pulumi.Input[_builtins.str] organization_slug: The slug of the organization.
|
|
287
|
+
"""
|
|
288
|
+
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
289
|
+
|
|
290
|
+
__props__ = _ActionsOrganizationWorkflowPermissionsState.__new__(_ActionsOrganizationWorkflowPermissionsState)
|
|
291
|
+
|
|
292
|
+
__props__.__dict__["can_approve_pull_request_reviews"] = can_approve_pull_request_reviews
|
|
293
|
+
__props__.__dict__["default_workflow_permissions"] = default_workflow_permissions
|
|
294
|
+
__props__.__dict__["organization_slug"] = organization_slug
|
|
295
|
+
return ActionsOrganizationWorkflowPermissions(resource_name, opts=opts, __props__=__props__)
|
|
296
|
+
|
|
297
|
+
@_builtins.property
|
|
298
|
+
@pulumi.getter(name="canApprovePullRequestReviews")
|
|
299
|
+
def can_approve_pull_request_reviews(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
300
|
+
"""
|
|
301
|
+
Whether GitHub Actions can approve pull request reviews. Defaults to `false`.
|
|
302
|
+
"""
|
|
303
|
+
return pulumi.get(self, "can_approve_pull_request_reviews")
|
|
304
|
+
|
|
305
|
+
@_builtins.property
|
|
306
|
+
@pulumi.getter(name="defaultWorkflowPermissions")
|
|
307
|
+
def default_workflow_permissions(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
308
|
+
"""
|
|
309
|
+
The default workflow permissions granted to the GITHUB_TOKEN when running workflows. Can be `read` or `write`. Defaults to `read`.
|
|
310
|
+
"""
|
|
311
|
+
return pulumi.get(self, "default_workflow_permissions")
|
|
312
|
+
|
|
313
|
+
@_builtins.property
|
|
314
|
+
@pulumi.getter(name="organizationSlug")
|
|
315
|
+
def organization_slug(self) -> pulumi.Output[_builtins.str]:
|
|
316
|
+
"""
|
|
317
|
+
The slug of the organization.
|
|
318
|
+
"""
|
|
319
|
+
return pulumi.get(self, "organization_slug")
|
|
320
|
+
|
|
@@ -24,13 +24,15 @@ class ActionsRepositoryPermissionsArgs:
|
|
|
24
24
|
repository: pulumi.Input[_builtins.str],
|
|
25
25
|
allowed_actions: Optional[pulumi.Input[_builtins.str]] = None,
|
|
26
26
|
allowed_actions_config: Optional[pulumi.Input['ActionsRepositoryPermissionsAllowedActionsConfigArgs']] = None,
|
|
27
|
-
enabled: Optional[pulumi.Input[_builtins.bool]] = None
|
|
27
|
+
enabled: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
28
|
+
sha_pinning_required: Optional[pulumi.Input[_builtins.bool]] = None):
|
|
28
29
|
"""
|
|
29
30
|
The set of arguments for constructing a ActionsRepositoryPermissions resource.
|
|
30
31
|
:param pulumi.Input[_builtins.str] repository: The GitHub repository
|
|
31
32
|
:param pulumi.Input[_builtins.str] allowed_actions: The permissions policy that controls the actions that are allowed to run. Can be one of: `all`, `local_only`, or `selected`.
|
|
32
33
|
:param pulumi.Input['ActionsRepositoryPermissionsAllowedActionsConfigArgs'] allowed_actions_config: Sets the actions that are allowed in an repository. Only available when `allowed_actions` = `selected`. See Allowed Actions Config below for details.
|
|
33
34
|
:param pulumi.Input[_builtins.bool] enabled: Should GitHub actions be enabled on this repository?
|
|
35
|
+
:param pulumi.Input[_builtins.bool] sha_pinning_required: Whether pinning to a specific SHA is required for all actions and reusable workflows in a repository.
|
|
34
36
|
"""
|
|
35
37
|
pulumi.set(__self__, "repository", repository)
|
|
36
38
|
if allowed_actions is not None:
|
|
@@ -39,6 +41,8 @@ class ActionsRepositoryPermissionsArgs:
|
|
|
39
41
|
pulumi.set(__self__, "allowed_actions_config", allowed_actions_config)
|
|
40
42
|
if enabled is not None:
|
|
41
43
|
pulumi.set(__self__, "enabled", enabled)
|
|
44
|
+
if sha_pinning_required is not None:
|
|
45
|
+
pulumi.set(__self__, "sha_pinning_required", sha_pinning_required)
|
|
42
46
|
|
|
43
47
|
@_builtins.property
|
|
44
48
|
@pulumi.getter
|
|
@@ -88,6 +92,18 @@ class ActionsRepositoryPermissionsArgs:
|
|
|
88
92
|
def enabled(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
89
93
|
pulumi.set(self, "enabled", value)
|
|
90
94
|
|
|
95
|
+
@_builtins.property
|
|
96
|
+
@pulumi.getter(name="shaPinningRequired")
|
|
97
|
+
def sha_pinning_required(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
98
|
+
"""
|
|
99
|
+
Whether pinning to a specific SHA is required for all actions and reusable workflows in a repository.
|
|
100
|
+
"""
|
|
101
|
+
return pulumi.get(self, "sha_pinning_required")
|
|
102
|
+
|
|
103
|
+
@sha_pinning_required.setter
|
|
104
|
+
def sha_pinning_required(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
105
|
+
pulumi.set(self, "sha_pinning_required", value)
|
|
106
|
+
|
|
91
107
|
|
|
92
108
|
@pulumi.input_type
|
|
93
109
|
class _ActionsRepositoryPermissionsState:
|
|
@@ -95,13 +111,15 @@ class _ActionsRepositoryPermissionsState:
|
|
|
95
111
|
allowed_actions: Optional[pulumi.Input[_builtins.str]] = None,
|
|
96
112
|
allowed_actions_config: Optional[pulumi.Input['ActionsRepositoryPermissionsAllowedActionsConfigArgs']] = None,
|
|
97
113
|
enabled: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
98
|
-
repository: Optional[pulumi.Input[_builtins.str]] = None
|
|
114
|
+
repository: Optional[pulumi.Input[_builtins.str]] = None,
|
|
115
|
+
sha_pinning_required: Optional[pulumi.Input[_builtins.bool]] = None):
|
|
99
116
|
"""
|
|
100
117
|
Input properties used for looking up and filtering ActionsRepositoryPermissions resources.
|
|
101
118
|
:param pulumi.Input[_builtins.str] allowed_actions: The permissions policy that controls the actions that are allowed to run. Can be one of: `all`, `local_only`, or `selected`.
|
|
102
119
|
:param pulumi.Input['ActionsRepositoryPermissionsAllowedActionsConfigArgs'] allowed_actions_config: Sets the actions that are allowed in an repository. Only available when `allowed_actions` = `selected`. See Allowed Actions Config below for details.
|
|
103
120
|
:param pulumi.Input[_builtins.bool] enabled: Should GitHub actions be enabled on this repository?
|
|
104
121
|
:param pulumi.Input[_builtins.str] repository: The GitHub repository
|
|
122
|
+
:param pulumi.Input[_builtins.bool] sha_pinning_required: Whether pinning to a specific SHA is required for all actions and reusable workflows in a repository.
|
|
105
123
|
"""
|
|
106
124
|
if allowed_actions is not None:
|
|
107
125
|
pulumi.set(__self__, "allowed_actions", allowed_actions)
|
|
@@ -111,6 +129,8 @@ class _ActionsRepositoryPermissionsState:
|
|
|
111
129
|
pulumi.set(__self__, "enabled", enabled)
|
|
112
130
|
if repository is not None:
|
|
113
131
|
pulumi.set(__self__, "repository", repository)
|
|
132
|
+
if sha_pinning_required is not None:
|
|
133
|
+
pulumi.set(__self__, "sha_pinning_required", sha_pinning_required)
|
|
114
134
|
|
|
115
135
|
@_builtins.property
|
|
116
136
|
@pulumi.getter(name="allowedActions")
|
|
@@ -160,6 +180,18 @@ class _ActionsRepositoryPermissionsState:
|
|
|
160
180
|
def repository(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
161
181
|
pulumi.set(self, "repository", value)
|
|
162
182
|
|
|
183
|
+
@_builtins.property
|
|
184
|
+
@pulumi.getter(name="shaPinningRequired")
|
|
185
|
+
def sha_pinning_required(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
186
|
+
"""
|
|
187
|
+
Whether pinning to a specific SHA is required for all actions and reusable workflows in a repository.
|
|
188
|
+
"""
|
|
189
|
+
return pulumi.get(self, "sha_pinning_required")
|
|
190
|
+
|
|
191
|
+
@sha_pinning_required.setter
|
|
192
|
+
def sha_pinning_required(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
193
|
+
pulumi.set(self, "sha_pinning_required", value)
|
|
194
|
+
|
|
163
195
|
|
|
164
196
|
@pulumi.type_token("github:index/actionsRepositoryPermissions:ActionsRepositoryPermissions")
|
|
165
197
|
class ActionsRepositoryPermissions(pulumi.CustomResource):
|
|
@@ -171,6 +203,7 @@ class ActionsRepositoryPermissions(pulumi.CustomResource):
|
|
|
171
203
|
allowed_actions_config: Optional[pulumi.Input[Union['ActionsRepositoryPermissionsAllowedActionsConfigArgs', 'ActionsRepositoryPermissionsAllowedActionsConfigArgsDict']]] = None,
|
|
172
204
|
enabled: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
173
205
|
repository: Optional[pulumi.Input[_builtins.str]] = None,
|
|
206
|
+
sha_pinning_required: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
174
207
|
__props__=None):
|
|
175
208
|
"""
|
|
176
209
|
This resource allows you to enable and manage GitHub Actions permissions for a given repository.
|
|
@@ -210,6 +243,7 @@ class ActionsRepositoryPermissions(pulumi.CustomResource):
|
|
|
210
243
|
:param pulumi.Input[Union['ActionsRepositoryPermissionsAllowedActionsConfigArgs', 'ActionsRepositoryPermissionsAllowedActionsConfigArgsDict']] allowed_actions_config: Sets the actions that are allowed in an repository. Only available when `allowed_actions` = `selected`. See Allowed Actions Config below for details.
|
|
211
244
|
:param pulumi.Input[_builtins.bool] enabled: Should GitHub actions be enabled on this repository?
|
|
212
245
|
:param pulumi.Input[_builtins.str] repository: The GitHub repository
|
|
246
|
+
:param pulumi.Input[_builtins.bool] sha_pinning_required: Whether pinning to a specific SHA is required for all actions and reusable workflows in a repository.
|
|
213
247
|
"""
|
|
214
248
|
...
|
|
215
249
|
@overload
|
|
@@ -268,6 +302,7 @@ class ActionsRepositoryPermissions(pulumi.CustomResource):
|
|
|
268
302
|
allowed_actions_config: Optional[pulumi.Input[Union['ActionsRepositoryPermissionsAllowedActionsConfigArgs', 'ActionsRepositoryPermissionsAllowedActionsConfigArgsDict']]] = None,
|
|
269
303
|
enabled: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
270
304
|
repository: Optional[pulumi.Input[_builtins.str]] = None,
|
|
305
|
+
sha_pinning_required: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
271
306
|
__props__=None):
|
|
272
307
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
273
308
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -283,6 +318,7 @@ class ActionsRepositoryPermissions(pulumi.CustomResource):
|
|
|
283
318
|
if repository is None and not opts.urn:
|
|
284
319
|
raise TypeError("Missing required property 'repository'")
|
|
285
320
|
__props__.__dict__["repository"] = repository
|
|
321
|
+
__props__.__dict__["sha_pinning_required"] = sha_pinning_required
|
|
286
322
|
super(ActionsRepositoryPermissions, __self__).__init__(
|
|
287
323
|
'github:index/actionsRepositoryPermissions:ActionsRepositoryPermissions',
|
|
288
324
|
resource_name,
|
|
@@ -296,7 +332,8 @@ class ActionsRepositoryPermissions(pulumi.CustomResource):
|
|
|
296
332
|
allowed_actions: Optional[pulumi.Input[_builtins.str]] = None,
|
|
297
333
|
allowed_actions_config: Optional[pulumi.Input[Union['ActionsRepositoryPermissionsAllowedActionsConfigArgs', 'ActionsRepositoryPermissionsAllowedActionsConfigArgsDict']]] = None,
|
|
298
334
|
enabled: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
299
|
-
repository: Optional[pulumi.Input[_builtins.str]] = None
|
|
335
|
+
repository: Optional[pulumi.Input[_builtins.str]] = None,
|
|
336
|
+
sha_pinning_required: Optional[pulumi.Input[_builtins.bool]] = None) -> 'ActionsRepositoryPermissions':
|
|
300
337
|
"""
|
|
301
338
|
Get an existing ActionsRepositoryPermissions resource's state with the given name, id, and optional extra
|
|
302
339
|
properties used to qualify the lookup.
|
|
@@ -308,6 +345,7 @@ class ActionsRepositoryPermissions(pulumi.CustomResource):
|
|
|
308
345
|
:param pulumi.Input[Union['ActionsRepositoryPermissionsAllowedActionsConfigArgs', 'ActionsRepositoryPermissionsAllowedActionsConfigArgsDict']] allowed_actions_config: Sets the actions that are allowed in an repository. Only available when `allowed_actions` = `selected`. See Allowed Actions Config below for details.
|
|
309
346
|
:param pulumi.Input[_builtins.bool] enabled: Should GitHub actions be enabled on this repository?
|
|
310
347
|
:param pulumi.Input[_builtins.str] repository: The GitHub repository
|
|
348
|
+
:param pulumi.Input[_builtins.bool] sha_pinning_required: Whether pinning to a specific SHA is required for all actions and reusable workflows in a repository.
|
|
311
349
|
"""
|
|
312
350
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
313
351
|
|
|
@@ -317,6 +355,7 @@ class ActionsRepositoryPermissions(pulumi.CustomResource):
|
|
|
317
355
|
__props__.__dict__["allowed_actions_config"] = allowed_actions_config
|
|
318
356
|
__props__.__dict__["enabled"] = enabled
|
|
319
357
|
__props__.__dict__["repository"] = repository
|
|
358
|
+
__props__.__dict__["sha_pinning_required"] = sha_pinning_required
|
|
320
359
|
return ActionsRepositoryPermissions(resource_name, opts=opts, __props__=__props__)
|
|
321
360
|
|
|
322
361
|
@_builtins.property
|
|
@@ -351,3 +390,11 @@ class ActionsRepositoryPermissions(pulumi.CustomResource):
|
|
|
351
390
|
"""
|
|
352
391
|
return pulumi.get(self, "repository")
|
|
353
392
|
|
|
393
|
+
@_builtins.property
|
|
394
|
+
@pulumi.getter(name="shaPinningRequired")
|
|
395
|
+
def sha_pinning_required(self) -> pulumi.Output[_builtins.bool]:
|
|
396
|
+
"""
|
|
397
|
+
Whether pinning to a specific SHA is required for all actions and reusable workflows in a repository.
|
|
398
|
+
"""
|
|
399
|
+
return pulumi.get(self, "sha_pinning_required")
|
|
400
|
+
|