ci: Updated workflows to match latest from template. (#3) #4

	name: Main Checks

	on:
	push:
	branches:
	- main

	permissions:
	contents: read
	security-events: write

	jobs:
	lint:
	name: Lint updated modules
	runs-on: ubuntu-latest
	env:
	# Required to avoid rate limiting when downloading plugins.
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	steps:
	- name: Checkout source code
	uses: actions/checkout@v4
	- uses: actions/cache@v4
	name: Cache plugin directory
	with:
	path: ~/.tflint.d/plugins
	key: tflint-${{ hashFiles('.tflint.hcl') }}
	- uses: terraform-linters/setup-tflint@v4
	name: Setup TFLint
	- name: Show version
	run: tflint --version
	- name: Init TFLint
	run: tflint --init
	- name: Run TFLint
	run: tflint --format sarif --recursive --config "$GITHUB_WORKSPACE/.tflint.hcl" > tflint-results.sarif
	- name: Upload SARIF result
	if: always()
	uses: github/codeql-action/upload-sarif@v3
	with:
	sarif_file: tflint-results.sarif

	trivy:
	name: Run security scan
	runs-on: ubuntu-latest
	steps:
	- name: Checkout source code
	uses: actions/checkout@v4
	- name: Run Trivy vulnarability scanner
	uses: aquasecurity/[email protected]
	with:
	scan-type: config
	format: sarif
	output: trivy-results.sarif
	- name: Upload SARIF result
	# Always run this step, even if a previous step failed.
	if: always()
	uses: github/codeql-action/upload-sarif@v3
	with:
	sarif_file: trivy-results.sarif

Provide feedback