tfaction-root.yaml

---
plan_workflow_name: pull_request_target # Mandatory
label_prefixes:
  tfmigrate: "migrate:"
# skip_create_pr: true

# drift_detection:
#   # issue_repo_owner:
#   # issue_repo_name:
#   minimum_detection_interval: 5 # 5 days. By default 7 days.
#   num_of_issues: 3 # 3 working directories are checked per workflow run. By default 1 working directory is checked.

# tflint:
#   enabled: true
# tfsec:
#   enabled: false
# trivy:
#   enabled: true

# scaffold_working_directory:
#   skip_adding_aqua_packages: true

aqua:
  update_checksum:
    # Update aqua-checksums.json in `setup` action
    enabled: true # default is false
    skip_push: false # default is false
    prune: true # default is false

target_groups:
  - working_directory: terraform/
    target: terraform/
    aws_region: ap-northeast-1
    s3_bucket_name_tfmigrate_history: "tfaction-sandbox-naruse666-tfmigrate-history"
    template_dir: templates/aws
    terraform_plan_config:
      aws_assume_role_arn: arn:aws:iam::451153100141:role/GitHubActions_Terraform_AWS_terraform_plan
    tfmigrate_plan_config:
      aws_assume_role_arn: arn:aws:iam::451153100141:role/GitHubActions_Terraform_AWS_tfmigrate_plan
    terraform_apply_config:
      aws_assume_role_arn: arn:aws:iam::451153100141:role/GitHubActions_Terraform_AWS_terraform_apply
    tfmigrate_apply_config:
      aws_assume_role_arn: arn:aws:iam::451153100141:role/GitHubActions_Terraform_AWS_tfmigrate_apply