feat(tags): Allow to protect tags.

Author: benoit-garcia

README.md

@@ -37,6 +37,7 @@ module "repo" {
 | [github_branch.default](https://registry.terraform.io/providers/integrations/github/latest/docs/resources/branch) | resource |
 | [github_branch_default.this](https://registry.terraform.io/providers/integrations/github/latest/docs/resources/branch_default) | resource |
 | [github_repository.this](https://registry.terraform.io/providers/integrations/github/latest/docs/resources/repository) | resource |
+| [github_repository_tag_protection.this](https://registry.terraform.io/providers/integrations/github/latest/docs/resources/repository_tag_protection) | resource |
 | [github_team.maintain](https://registry.terraform.io/providers/integrations/github/latest/docs/resources/team) | resource |
 | [github_team.read](https://registry.terraform.io/providers/integrations/github/latest/docs/resources/team) | resource |
 | [github_team.write](https://registry.terraform.io/providers/integrations/github/latest/docs/resources/team) | resource |
@@ -71,6 +72,7 @@ module "repo" {
 | <a name="input_homepage_url"></a> [homepage_url](#input_homepage_url) | URL of a page describing the project. | `string` | `null` | no |
 | <a name="input_is_template"></a> [is_template](#input_is_template) | Set to `true` to tell GitHub that this is a template repository. | `bool` | `false` | no |
 | <a name="input_license_template"></a> [license_template](#input_license_template) | Use the name of the template without the extension. For example, `mit` or `mpl-2.0`. | `string` | `null` | no |
+| <a name="input_tag_protections"></a> [tag_protections](#input_tag_protections) | List of tag patterns to protect. | `list(string)` | `[]` | no |
 | <a name="input_teams_maintain"></a> [teams_maintain](#input_teams_maintain) | Slugs of the teams that will be granted the 'maintain' privilege. If null, a team will be created. | `list(string)` | `[]` | no |
 | <a name="input_teams_read"></a> [teams_read](#input_teams_read) | Slugs of the teams that will be granted the 'pull' privilege. If null, a team will be created. | `list(string)` | `[]` | no |
 | <a name="input_teams_write"></a> [teams_write](#input_teams_write) | Slugs of the teams that will be granted the 'write' privilege. If null, a team will be created. | `list(string)` | `[]` | no |

main.tf

@@ -60,3 +60,10 @@ resource "github_branch_default" "this" {
   repository = github_repository.this.name
   branch     = var.default_branch == "main" ? "main" : github_branch.default[0].branch
 }
+
+resource "github_repository_tag_protection" "this" {
+  count = length(var.tag_protections)
+
+  repository = github_repository.this.name
+  pattern    = var.tag_protections[count.index]
+}

variables.tf

@@ -158,3 +158,9 @@ variable "vulnerability_alerts" {
   type        = bool
   default     = true
 }
+
+variable "tag_protections" {
+  description = "List of tag patterns to protect."
+  type        = list(string)
+  default     = []
+}