Skip to content

Commit e618f46

Browse files
chris11-taylor-nttdchris11-taylor-nttd
authored
Implement container registry token module (#1)
* Implement container registry token * Point at released scope_map module
1 parent 1c20631 commit e618f46

30 files changed

+1798
-1
lines changed

‎.github/dependabot.yml

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
version: 2
2+
updates:
3+
- package-ecosystem: "github-actions"
4+
directory: "/"
5+
schedule:
6+
interval: "weekly"
7+
- package-ecosystem: "gomod"
8+
directory: "/"
9+
schedule:
10+
interval: "weekly"
11+
- package-ecosystem: "terraform"
12+
directory: "/"
13+
schedule:
14+
interval: "weekly"

‎.github/release-drafter.yml

Lines changed: 49 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,49 @@
1+
---
2+
name-template: "$RESOLVED_VERSION"
3+
tag-template: "$RESOLVED_VERSION"
4+
template: |
5+
# Changelog
6+
7+
$CHANGES
8+
9+
---
10+
11+
See details of [all code changes](https://github.com/$OWNER/$REPOSITORY/compare/$PREVIOUS_TAG...$RESOLVED_VERSION) since previous release.
12+
13+
categories:
14+
- title: ":warning: Breaking Changes"
15+
labels:
16+
- "major"
17+
- title: "🚀 Features"
18+
labels:
19+
- "minor"
20+
- title: "🔧 Fixes"
21+
collapse-after: 3
22+
labels:
23+
- "patch"
24+
25+
autolabeler:
26+
- label: "major"
27+
branch:
28+
- '/(patch|bug|fix|feature|chore)!\/.+/'
29+
- label: "minor"
30+
branch:
31+
- '/feature\/.+/'
32+
- label: "patch"
33+
branch:
34+
- '/(patch|bug|fix|chore)\/.+/'
35+
36+
change-template: "- $TITLE @$AUTHOR (#$NUMBER)"
37+
38+
version-resolver:
39+
major:
40+
labels:
41+
- "major"
42+
minor:
43+
labels:
44+
- "minor"
45+
patch:
46+
labels:
47+
- "patch"
48+
- "dependencies"
49+
default: patch

‎.github/workflows/pull-request-label.yml

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
name: Label Pull Request
2+
3+
on:
4+
pull_request:
5+
types: [opened, reopened, synchronize]
6+
7+
jobs:
8+
check:
9+
name: "Label Pull Request"
10+
permissions:
11+
contents: read
12+
issues: write
13+
pull-requests: write
14+
uses: launchbynttdata/launch-workflows/.github/workflows/reusable-pr-label-by-branch.yml@0.10.0
15+
secrets: inherit # pragma: allowlist secret

‎.github/workflows/pull-request-terraform-check.yml

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
name: Check Azure Terraform Code
2+
3+
on:
4+
pull_request:
5+
types: [ opened, reopened, synchronize, ready_for_review ]
6+
branches: [ main ]
7+
8+
permissions:
9+
id-token: write
10+
contents: read
11+
12+
jobs:
13+
check:
14+
name: "Check Azure Terraform Code"
15+
permissions:
16+
contents: read
17+
id-token: write
18+
uses: launchbynttdata/launch-workflows/.github/workflows/reusable-terraform-check-azure.yml@0.10.0
19+
secrets: inherit # pragma: allowlist secret

‎.github/workflows/release-publish.yml

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
name: Publish Release
2+
3+
on:
4+
push:
5+
branches:
6+
- main
7+
8+
permissions:
9+
contents: read
10+
11+
jobs:
12+
release-on-merge:
13+
name: "Create and Publish Release on Merge"
14+
permissions:
15+
contents: write
16+
pull-requests: write
17+
uses: launchbynttdata/launch-workflows/.github/workflows/reusable-release-on-merge.yml@0.10.0
18+
secrets: inherit # pragma: allowlist secret

‎.gitignore

Lines changed: 65 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,65 @@
1+
terraform.*
2+
.repo/
3+
components/
4+
.semverbot.toml
5+
.tflint.hcl
6+
.golangci.yaml
7+
8+
.idea
9+
!examples/*.tfvars
10+
11+
# We don't want to commit the test run lock files
12+
.terraform.lock.hcl
13+
14+
# Don't include the .test-data directory created by Terratest's test-structure module
15+
**/.test-data/*
16+
17+
# Local .terraform directories
18+
**/.terraform/*
19+
20+
# Local .terragrunt directories
21+
**/.terragrunt/*
22+
23+
# .tfstate files
24+
*.tfstate
25+
*.tfstate.*
26+
27+
# Crash log files
28+
crash.log
29+
crash.*.log
30+
31+
# Exclude all .tfvars files, which are likely to contain sensitive data, such as
32+
# password, private keys, and other secrets. These should not be part of version
33+
# control as they are data points which are potentially sensitive and subject
34+
# to change depending on the environment.
35+
*.tfvars.json
36+
*.auto.tfvars
37+
38+
# Ignore override files as they are usually used to override resources locally and so
39+
# are not checked in
40+
override.tf
41+
override.tf.json
42+
*_override.tf
43+
*_override.tf.json
44+
provider.tf
45+
46+
# Include override files you do wish to add to version control using negated pattern
47+
# !example_override.tf
48+
49+
# Include tfplan files to ignore the plan output of command: terraform plan -out=tfplan
50+
# example: *tfplan*
51+
52+
# Ignore CLI configuration files
53+
.terraformrc
54+
terraform.rc
55+
56+
# Files from common modules
57+
azure_env.sh
58+
.releaserc.json
59+
.tflint.hcl
60+
61+
# Pre-commit hook
62+
.pre-commit-config.yaml
63+
64+
# VS Code
65+
.vscode/

‎.secrets.baseline

Lines changed: 109 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,109 @@
1+
{
2+
"version": "1.2.0",
3+
"plugins_used": [
4+
{
5+
"name": "ArtifactoryDetector"
6+
},
7+
{
8+
"name": "AWSKeyDetector"
9+
},
10+
{
11+
"name": "AzureStorageKeyDetector"
12+
},
13+
{
14+
"name": "Base64HighEntropyString",
15+
"limit": 4.5
16+
},
17+
{
18+
"name": "BasicAuthDetector"
19+
},
20+
{
21+
"name": "CloudantDetector"
22+
},
23+
{
24+
"name": "GitHubTokenDetector"
25+
},
26+
{
27+
"name": "HexHighEntropyString",
28+
"limit": 3.0
29+
},
30+
{
31+
"name": "IbmCloudIamDetector"
32+
},
33+
{
34+
"name": "IbmCosHmacDetector"
35+
},
36+
{
37+
"name": "JwtTokenDetector"
38+
},
39+
{
40+
"name": "KeywordDetector",
41+
"keyword_exclude": ""
42+
},
43+
{
44+
"name": "MailchimpDetector"
45+
},
46+
{
47+
"name": "NpmDetector"
48+
},
49+
{
50+
"name": "PrivateKeyDetector"
51+
},
52+
{
53+
"name": "SendGridDetector"
54+
},
55+
{
56+
"name": "SlackDetector"
57+
},
58+
{
59+
"name": "SoftlayerDetector"
60+
},
61+
{
62+
"name": "SquareOAuthDetector"
63+
},
64+
{
65+
"name": "StripeDetector"
66+
},
67+
{
68+
"name": "TwilioKeyDetector"
69+
}
70+
],
71+
"filters_used": [
72+
{
73+
"path": "detect_secrets.filters.allowlist.is_line_allowlisted"
74+
},
75+
{
76+
"path": "detect_secrets.filters.common.is_ignored_due_to_verification_policies",
77+
"min_level": 2
78+
},
79+
{
80+
"path": "detect_secrets.filters.heuristic.is_indirect_reference"
81+
},
82+
{
83+
"path": "detect_secrets.filters.heuristic.is_likely_id_string"
84+
},
85+
{
86+
"path": "detect_secrets.filters.heuristic.is_lock_file"
87+
},
88+
{
89+
"path": "detect_secrets.filters.heuristic.is_not_alphanumeric_string"
90+
},
91+
{
92+
"path": "detect_secrets.filters.heuristic.is_potential_uuid"
93+
},
94+
{
95+
"path": "detect_secrets.filters.heuristic.is_prefixed_with_dollar_sign"
96+
},
97+
{
98+
"path": "detect_secrets.filters.heuristic.is_sequential_string"
99+
},
100+
{
101+
"path": "detect_secrets.filters.heuristic.is_swagger_file"
102+
},
103+
{
104+
"path": "detect_secrets.filters.heuristic.is_templated_secret"
105+
}
106+
],
107+
"results": {},
108+
"generated_at": "2025-08-21T14:53:53Z"
109+
}

‎.terraform-docs.yml

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
formatter: "markdown"
2+
3+
output:
4+
file: "README.md"
5+
mode: "inject"
6+
7+
sort:
8+
enabled: false
9+
10+
sections:
11+
hide:
12+
- providers

‎.tool-versions

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
conftest 0.56.0
2+
golang 1.24.2
3+
golangci-lint 2.2.1
4+
pre-commit 4.2.0
5+
regula 3.2.1 # https://github.com/launchbynttdata/asdf-regula
6+
terraform 1.10.3
7+
terraform-docs 0.20.0
8+
tflint 0.57.0

0 commit comments

Comments
 (0)