making IMDSv2 mandatory (#314) #177

	name: TFLint & Plan - ALI

	on:
	pull_request:
	paths:
	- '.github/workflows/ali-*'
	- 'ali/**'
	- 'modules/**'
	- 'scripts/**'
	push:
	branches:
	- main

	permissions:
	id-token: write
	contents: read

	jobs:
	tflint-plan:
	name: ALI tflint + terraform plan
	runs-on: ubuntu-latest

	steps:
	- name: Checkout branch
	uses: actions/checkout@v4

	- name: Install Terraform
	uses: opentofu/setup-opentofu@v1
	with:
	terraform_version: 1.5.7
	terraform_wrapper: false

	- uses: terraform-linters/setup-tflint@v2
	name: Setup TFLint
	with:
	github_token: ${{ secrets.GITHUB_TOKEN }}

	- name: Install virtualenv
	run: pip install virtualenv

	- name: Install AWS CLI
	uses: unfor19/install-aws-cli-action@v1
	with:
	arch: amd64

	- name: configure aws credentials
	uses: aws-actions/[email protected]
	with:
	role-to-assume: arn:aws:iam::${{ secrets.PY_FOUNDATION_AWS_ACC_ID }}:role/${{ secrets.PY_FOUNDATION_AWS_DEPLOY_ROLE }}
	aws-region: us-east-1

	- name: "Run TFLint runners"
	shell: bash
	working-directory: ali
	run: make tflint

	- name: Make plan
	shell: bash
	working-directory: ali
	run: make plan
	env:
	TERRAFORM_EXTRAS: -lock-timeout=15m

Provide feedback