refs platform/board#4025: add vulnerability_scanning_config block

Author: FabrizioCafolla

CHANGELOG.md

@@ -20,6 +20,14 @@ Following semver, any non backwards compatible feature implies that the next rel
 
 ## [Unreleased]
 
+## [0.12.0] - 2025-11-22
+
+[Compare with previous version](https://github.com/sparkfabrik/terraform-google-gcp-artifact-registry/compare/0.11.0...0.11.1)
+
+### Changed
+
+- FEAT (refs platform/board#4025): add `vulnerability_scanning_config` block
+
 ## [0.11.1] - 2025-11-07
 
 [Compare with previous version](https://github.com/sparkfabrik/terraform-google-gcp-artifact-registry/compare/0.11.0...0.11.1)

main.tf

@@ -147,7 +147,13 @@ resource "google_artifact_registry_repository" "repositories" {
   cleanup_policy_dry_run = each.value.cleanup_policy_dry_run
   labels                 = merge(var.default_labels, var.additional_labels, each.value.labels)
 
-    dynamic "cleanup_policies" {
+  vulnerability_scanning_config {
+    enablement_config       = each.value.vulnerability_scanning_config.enablement_config
+    enablement_state        = each.value.vulnerability_scanning_config.enablement_state
+    enablement_state_reason = each.value.vulnerability_scanning_config.enablement_state_reason
+  }
+  
+  dynamic "cleanup_policies" {
     for_each = each.value.cleanup_policies
     content {
       id     = cleanup_policies.key

variables.tf

@@ -22,6 +22,11 @@ variable "repositories" {
     description                     = string
     format                          = optional(string, "DOCKER")
     mode                            = optional(string, "STANDARD_REPOSITORY")
+    vulnerability_scanning_config = optional(object({
+      enablement_config       = optional(string, "DISABLED")
+      enablement_state        = optional(string)
+      enablement_state_reason = optional(string)
+    }), {})
     cleanup_policy_dry_run          = optional(bool, true)
     cleanup_policies_enable_default = optional(bool, true)
     cleanup_policies = optional(map(object({