terraform-test.yml

name: Terraform Validation and Testing

on:
  push:
    branches: [ main, feature/* ]
    paths:
      - '*.tf'
      - '*.tftest.hcl'
      - 'modules/**'
      - '.tflint.hcl'
      - '.pre-commit-config.yaml'
      - '.github/workflows/terraform-test.yml'
  pull_request:
    branches: [ main ]
    paths:
      - '*.tf'
      - '*.tftest.hcl'
      - 'modules/**'
      - '.tflint.hcl'
      - '.pre-commit-config.yaml'
  workflow_dispatch:

jobs:
  terraform-checks:
    name: Terraform Checks & Validation
    runs-on: ubuntu-latest
    permissions:
      contents: read

    steps:
    - name: Checkout repository
      uses: actions/checkout@v4

    - name: Setup environment
      uses: ./.github/actions/setup-nix-shell
      with:
        prepare_terraform: true

    - name: Run pre-commit hooks
      run: pre-commit run --all-files --show-diff-on-failure

    - name: Terraform Init
      run: terraform init -backend=false

    - name: Terraform Validate
      run: terraform validate