/deploy sit

Author: sliu008

.github/workflows/build.yml

@@ -16,13 +16,13 @@ env:
   REGISTRY: ghcr.io
   IMAGE_NAME: ${{ github.repository }}
   PYTHON_VERSION: '3.10'
-  POETRY_VERSION: '2.1.3'
-  TERRAFORM_VERSION: '1.5.3'
+  POETRY_VERSION: '1.8.5'
+  TERRAFORM_VERSION: '2.1.3'
 
 jobs:
   build:
     name: Build, Test, and Publish
-    runs-on: ubuntu-24.04-arm
+    runs-on: ubuntu-latest
 
     permissions:
       contents: write
@@ -41,7 +41,7 @@ jobs:
           cache: 'pip'
 
       - name: Setup Poetry
-        uses: abatilo/actions-poetry@v4
+        uses: abatilo/actions-poetry@v3
         with:
           poetry-version: ${{ env.POETRY_VERSION }}
 
@@ -97,51 +97,27 @@ jobs:
           echo "pyproject_name=${pyproject_name}" >> $GITHUB_ENV
           poetry version ${new_version}
 
-      - name: Download Snyk CLI (ARM64)
-        run: |
-          curl -Lo snyk https://static.snyk.io/cli/latest/snyk-linux-arm64
-          chmod +x snyk
-          sudo mv snyk /usr/local/bin
-
       - name: Run Snyk as a blocking step
-        run: |
-          snyk test \
-            --org=${{ secrets.SNYK_ORG_ID }} \
-            --project-name=${{ github.repository }} \
-            --severity-threshold=high \
-            --fail-on=all
+        uses: snyk/actions/python@master
         env:
-          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+            SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+        with:
+          command: test
+          args: >
+              --org=${{ secrets.SNYK_ORG_ID }}
+              --project-name=${{ github.repository }}
+              --severity-threshold=high
+              --fail-on=all
 
       - name: Run Snyk on Python
-        run: |
-          snyk monitor \
-            --org=${{ secrets.SNYK_ORG_ID }} \
-            --project-name=${{ github.repository }} \
+        uses: snyk/actions/python@master
         env:
           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
-
-      #- name: Run Snyk as a blocking step
-      #  uses: snyk/actions/python@master
-      #  env:
-      #      SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
-      #  with:
-      #    command: test
-      #    args: >
-      #       --org=${{ secrets.SNYK_ORG_ID }}
-      #        --project-name=${{ github.repository }}
-      #        --severity-threshold=high
-      #        --fail-on=all
-
-      #- name: Run Snyk on Python
-      #  uses: snyk/actions/python@master
-      #  env:
-      #    SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
-      #  with:
-      #    command: monitor
-      #    args: >
-      #      --org=${{ secrets.SNYK_ORG_ID }}
-      #      --project-name=${{ github.repository }}
+        with:
+          command: monitor
+          args: >
+            --org=${{ secrets.SNYK_ORG_ID }}
+            --project-name=${{ github.repository }}
 
       - name: Run Poetry
         run: |
@@ -346,4 +322,4 @@ jobs:
           terraform --version
           source bin/config.sh ${{ env.TARGET_ENV_LOWERCASE }}
           terraform plan -var-file=tfvars/"${{ env.TARGET_ENV_LOWERCASE }}".tfvars -var="app_version=${{ env.new_version }}" -out="tfplan"
-          terraform apply -auto-approve tfplan > /dev/null
+          terraform apply -auto-approve tfplan > /dev/null

terraform/fargate/main.tf

@@ -15,7 +15,7 @@ terraform {
     }
     null = {
       source  = "hashicorp/null"
-      version = "~> 3.2"
+      version = "~> 2.1"
     }
     random = {
       source = "hashicorp/random"

terraform/main.tf

@@ -15,7 +15,7 @@ terraform {
     }
     null = {
       source  = "hashicorp/null"
-      version = "~> 3.2"
+      version = "~> 2.1"
     }
     random = {
       source = "hashicorp/random"