feat: add .github repo to store common default docs

gh/labels/labels.tf

@@ -115,12 +115,12 @@ locals {
     },
     {
       name : "cla: yes",
-      color : "ff0040",
+      color : "98fb00",
       description : "User has signed the Contributor License Agreement"
     },
     {
       name : "cla: no",
-      color : "98fb00",
+      color : "ff0040",
       description : "User has not signed the Contributor License Agreement"
     }
   ]

gh/modules/actions-repo/repo.tf

@@ -33,19 +33,19 @@ resource "github_repository" "repo" {
 resource "github_branch_protection" "branch_protection" {
   repository_id = github_repository.repo.node_id
   pattern       = "main"
-  # disabled due to https://github.com/terraform-providers/terraform-provider-github/issues/572
-  # required_status_checks {
-  #   strict   = true
-  #   contexts = var.status_checks
-  # }
+  required_status_checks {
+    strict   = true
+    contexts = var.status_checks
+  }
   required_pull_request_reviews {
     dismiss_stale_reviews = false
   }
 }
 
 resource "github_repository_collaborator" "google_bot" {
-  count      = var.allow_google_bot ? 1 : 0
-  repository = github_repository.repo.name
-  username   = "google-github-actions-bot"
-  permission = "triage"
+  count                       = var.allow_google_bot ? 1 : 0
+  repository                  = github_repository.repo.name
+  username                    = "google-github-actions-bot"
+  permission                  = "triage"
+  permission_diff_suppression = true
 }

gh/repos/providers.tf

@@ -15,7 +15,7 @@
  */
 
 provider "github" {
-  version      = "~> 3.1.0"
+  version      = "~> 4.4.0"
   organization = local.gh_org
 }
 

gh/repos/repos.tf

@@ -62,6 +62,12 @@ locals {
       name : "release-please-action",
       description : "automated releases based on conventional commits",
       templated : false
+      status_checks : ["cla/google", "test (12)"]
+    },
+    {
+      name : ".github",
+      description : "Default files for google-github-actions",
+      templated : false
     },
   ]
 }