search

triat / terraform-security-scan

Run a security scan on your terraform with the very nice https://github.com/aquasecurity/tfsec
MIT License
110 stars 30 forks source link

Update floating tag #49

Closed figadore closed 2 years ago

figadore commented 2 years ago

the v3 tag is not up to date with v3.0.1

Are releases automated? If not, maybe a GitHub Action workflow similar to https://github.com/google-github-actions/setup-gcloud/blob/6a46c264e16f6bfca990b7e920290d4a8f8dba4e/.github/workflows/release.yml#L65-L94 could be added. I've adapted this strategy for my own terraform modules and GitHub Actions, but not sure what the requirements would be for this repo. Happy to contribute if this seems nontrivial

triat commented 2 years ago

Releases are not automated. I do them by hand. What I understand from what you propose is to have the v3 tag to use the latest v3.x.x version right? This could be something to put in place but I'm more someone who specifies what version I want to use and I don't really like when a tool changes from one build to another. So, for this action, I don't think this is nice to have something that switches versions automagically. I guess this is arguable.

Anyway, this is open source, you're free to propose an update and I'll take it in consideration as neutral as possible, whatever is better for the tool :)