ci-pull-request-modules-foundational.yaml

name: CI - Pull Request CSPM

on:
  pull_request:
    branches:
      - main
    paths:
      - 'modules/foundational/**'

jobs:
  lint:
    name: Lint
    runs-on: ubuntu-latest

    steps:
    - name: Check out code
      uses: actions/checkout@v3

    - name: cfn-lint
      uses: scottbrenner/cfn-lint-action@v2

    - name: Print the Cloud Formation Linter Version & run Linter
      run: |
        cfn-lint --version
        cfn-lint -t modules/foundational/*.yaml

  build:
    name: Build and Upload CSPM templates
    runs-on: ubuntu-latest
    needs: [lint]

    steps:
    - name: Check out code
      uses: actions/checkout@v3

    - name: Configure AWS credentials
      uses: aws-actions/configure-aws-credentials@v1
      with:
        aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
        aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
        aws-region: eu-west-1

    - name: Publish Templates
      run: make publish
      working-directory: modules/foundational
      env:
        S3_BUCKET: cf-templates-cloudvision-ci
        S3_PREFIX: pr/${{ github.event.pull_request.number }}