diff --git a/.github/workflows/infra-visualiser-infra-prod.yml b/.github/workflows/infra-visualiser-infra-prod.yml new file mode 100644 index 0000000..1d5918b --- /dev/null +++ b/.github/workflows/infra-visualiser-infra-prod.yml @@ -0,0 +1,36 @@ + +name: Visualize Prod GCP +on: + push: + branches: [ "main", "master" ] + paths: + - '**/*.tf' + - '**/*.tfvars' + - '.github/workflows/infra-visualiser-infra-prod.yml' + workflow_dispatch: + +jobs: + analyze: + runs-on: ubuntu-latest + permissions: + id-token: write + contents: read + steps: + - uses: actions/checkout@v5 + with: + fetch-depth: 2 + + - name: Analyze & Visualize + id: analysis + env: + AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} + AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} + uses: smithy-security/infra-visualiser-action@v1.0.11 + with: + use_terraform: true + directory: "infra/prod" + recipe_nickname: "Prod GCP" + gcp_credentials_json: ${{ secrets.GCP_CREDENTIALS_JSON }} + host: "https://grafos.ai" + upload_to_github: "false" + \ No newline at end of file