preview.yml

name: Preview

on:
  pull_request:

concurrency:
  group: terraform-google-identity-group
  cancel-in-progress: false

jobs:
  pre-commit:
    runs-on: ubuntu-latest
    name: Static Analysis
    steps:
      - name: Checkout
        # for security reasons we pin commit ids and not tags.
        # actions/checkout@v3.0.2 -> 2541b1294d2704b0964813337f33b291d3f8596b
        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
        with:
          fetch-depth: 0

      - name: Setup asdf
        # asdf-vm/actions/plugins-add@v3.0.2
        uses: asdf-vm/actions/plugins-add@05e0d2ed97b598bfce82fd30daf324ae0c4570e6

      - name: Install tools via asdf
        run: asdf install

      - name: Set up Golang
        # actions/setup-go@v5.0.0
        uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
        with:
          go-version: 1.22.0

      - name: Set up Terradoc
        # for security reasons we pin commit ids and not tags.
        # mineiros-io/terradoc@main -> af1a7b3ae3635958adf5ee2f40e0c3e70fd0803a
        run: go install github.com/mineiros-io/terradoc/cmd/terradoc@af1a7b3ae3635958adf5ee2f40e0c3e70fd0803a
        env:
          GOPROXY: direct

      - name: Cache plugin dir
        # for security reasons we pin commit ids and not tags.
        # actions/cache@v4.0.0 -> 13aacd865c20de90d75de3b17ebe84f7a17d57d2
        uses: actions/cache@13aacd865c20de90d75de3b17ebe84f7a17d57d2
        with:
          path: ~/.tflint.d/plugins
          key: tflint-${{ hashFiles('.tflint.hcl') }}

      - name: Init TFLint
        run: tflint --init
        env:
          # https://github.com/terraform-linters/tflint/blob/master/docs/user-guide/plugins.md#avoiding-rate-limiting
          GITHUB_TOKEN: ${{ github.token }}

      - name: Setup and run pre-commit
        # for security reasons we pin commit ids and not tags.
        # pre-commit/action@v3.0.1 -> 2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd
        uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd

  unit-tests:
    # needs: pre-commit
    runs-on: ubuntu-latest
    name: Unit Tests
    steps:
      - name: Checkout
        # for security reasons we pin commit ids and not tags.
        # actions/checkout@v3.0.2 -> 2541b1294d2704b0964813337f33b291d3f8596b
        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
        with:
          fetch-depth: 0

      - name: Setup asdf
        # asdf-vm/actions/plugins-add@v3.0.2
        uses: asdf-vm/actions/plugins-add@05e0d2ed97b598bfce82fd30daf324ae0c4570e6

      - name: Install tools via asdf
        run: asdf install

      - name: Set up Golang
        # actions/setup-go@v5.0.0
        uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
        with:
          go-version: 1.22.0

      - name: Run Unit Tests
        run: make test/unit-tests
        env:
          GOOGLE_CREDENTIALS: ${{ secrets.MINEIROS_TESTING_GCP_SA_KEY_FILE }}
          TEST_GCP_PROJECT: ${{ secrets.MINEIROS_TESTING_GCP_PROJECT }}
          TEST_GCP_ORG_DOMAIN: ${{ secrets.MINEIROS_TESTING_GCP_ORG_DOMAIN }}