mirror of
https://github.com/Sea-Haven-Industries/shoc-backend.git
synced 2026-09-30 22:23:12 +00:00
77c3016c9d
Some checks are pending
Validate and deploy / Validate deployable source bundle (push) Waiting to run
Validate and deploy / Deploy shoc-backend-dev through Terraform (push) Blocked by required conditions
Validate and deploy / Deploy shoc-backend-staging to Elastic Beanstalk (push) Blocked by required conditions
* feat(deploy): move dev application CD through Terraform GitHub creates the immutable Elastic Beanstalk version; HCP Terraform is the only UpdateEnvironment caller via a guarded version_label run. * fix: add permissions block for dependency-review workflow Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> * fix(terraform): stop pinning the generated dev instance SG --------- Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
15 lines
456 B
HCL
15 lines
456 B
HCL
variable "release_version_label" {
|
|
type = string
|
|
default = null
|
|
nullable = true
|
|
|
|
description = "Immutable Elastic Beanstalk application version. Null VCS plans leave the live version unchanged."
|
|
|
|
validation {
|
|
condition = (
|
|
var.release_version_label == null ||
|
|
can(regex("^[0-9a-f]{40}-[0-9]+-[0-9]+$", var.release_version_label))
|
|
)
|
|
error_message = "release_version_label must be <full-sha>-<run-id>-<attempt>."
|
|
}
|
|
}
|