ci: add tfsec workflow

.github/workflows/changelog.yaml → .github/workflows/changelog.yml

@@ -1,14 +1,13 @@
 name: changelog
 permissions: write-all
-
 on:
   push:
     tags:
       - "*"
-  # Allows you to run this workflow manually from the Actions tab
   workflow_dispatch:
 jobs:
-  call-workflow-changelog:
+  changelog:
     uses: clouddrove/github-shared-workflows/.github/workflows/changelog.yml@master
+    secrets: inherit
     with:
       branch: 'master'

.github/workflows/tfsec.yml

@@ -0,0 +1,11 @@
+name: tfsec
+permissions: write-all
+on:
+  pull_request:
+  workflow_dispatch:
+jobs:
+  tfsec:
+    uses: clouddrove/github-shared-workflows/.github/workflows/tfsec.yml@master
+    secrets: inherit
+    with:
+      working_directory: '.'

examples/mysql-flexible-server-replication/main.tf

@@ -60,10 +60,9 @@ data "azurerm_private_dns_zone" "main" {
 
 module "flexible-mysql" {
   depends_on                     = [module.resource_group, module.vnet, data.azurerm_resource_group.main]
-  source                         = "../.."
+  source                         = "clouddrove/flexible-mysql/azure"
   name                           = "app"
   environment                    = "test"
-  label_order                    = ["name", "environment"]
   main_rg_name                   = data.azurerm_resource_group.main.name
   resource_group_name            = module.resource_group.resource_group_name
   location                       = module.resource_group.resource_group_location

examples/mysql-flexible-server/main.tf

@@ -51,10 +51,9 @@ module "subnet" {
 
 module "flexible-mysql" {
   depends_on          = [module.resource_group, module.vnet]
-  source              = "../.."
+  source              = "clouddrove/flexible-mysql/azure"
   name                = "app"
   environment         = "test"
-  label_order         = ["name", "environment"]
   resource_group_name = module.resource_group.resource_group_name
   location            = module.resource_group.resource_group_location
   virtual_network_id  = module.vnet.vnet_id[0]

variables.tf

@@ -20,7 +20,7 @@ variable "repository" {
 
 variable "label_order" {
   type        = list(any)
-  default     = []
+  default     = ["name", "environment"]
   description = "Label order, e.g. sequence of application name and environment `name`,`environment`,'attribute' [`webserver`,`qa`,`devops`,`public`,] ."
 }