shoc-backend/.github/workflows
Adam Moussa 24f08d3cb1
feat(terraform): adopt live deployment roles safely (#94)
* feat(terraform): add safe backend environment adoption

Introduce import-guarded environment roots and retire temporary bootstrap and POC provisioning after ownership transfer.

* ci(deploy): pause dev and staging deployments

Prevent application releases from racing Terraform adoption while retaining production deployment and validation.

* ci(deploy): require manual environment dispatch

* fix: update `required_version` from `>=1.7.0` to `>=1.9.0`

The deploy-boundary check interpolates `var.aws_account_id` and `var.environment`. Terraform only allows other variables inside `validation` from 1.9.0+.

CI already runs against `1.9.8` so `versions.tf` setting version as `>=1.7.0` is a breaking finding

* chore(deps): add `terraform` to renovate dependency coverage

* ci(deploy): drop unprovisioned prod dispatch path
2026-08-31 11:51:18 -04:00
..
architecture-quality.yml chore(deps): bump actions/checkout from 4 to 7 (#51) 2026-08-04 09:56:24 -03:00
ci.yml feat(terraform): adopt live deployment roles safely (#94) 2026-08-31 11:51:18 -04:00
dependency-review.yml ci: document CDK advisory exception 2026-07-27 19:29:37 -03:00
deploy.yml feat(terraform): adopt live deployment roles safely (#94) 2026-08-31 11:51:18 -04:00
labeler.yml Repo hygiene: PR labeler + README badges (INFRA-56/57) (#5) 2026-06-11 14:14:27 -04:00