fix: alerts and protections disabled upon archival

Signed-off-by: James Ramirez <james.ramirez@grendel-consulting.com>
grendel-consulting · Jan 12, 2025 · ff14ba7 · ff14ba7
1 parent f4f606d
commit ff14ba7
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/modules/repository/repository.tf b/modules/repository/repository.tf
@@ -10,7 +10,7 @@ resource "github_repository" "this" {
   delete_branch_on_merge = true
   has_discussions        = var.discussions
   has_issues             = true
-  vulnerability_alerts   = true
+  vulnerability_alerts   = var.archived == true ? false : true
 
   dynamic "security_and_analysis" {
     for_each = var.visibility == "public" ? [{}] : []
@@ -21,7 +21,7 @@ resource "github_repository" "this" {
       }
 
       secret_scanning_push_protection {
-        status = "enabled"
+        status = var.archived == true ? "disabled" : "enabled"
       }
     }
   }