From d490e1fb5ef3863b9403017af38a243f2305aea5 Mon Sep 17 00:00:00 2001 From: Your Name Date: Tue, 7 Apr 2026 12:48:44 -0400 Subject: [PATCH] fix: add provider "github" block with insecure=true for Census GHE TLS The Census GHE TLS cert is signed by the Census internal CA which is not present in the CodeBuild container trust store. insecure=true disables x509 verification so terraform apply can call the GHE API. --- providers.tf | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/providers.tf b/providers.tf index 750bf71..4e4215b 100644 --- a/providers.tf +++ b/providers.tf @@ -10,3 +10,10 @@ terraform { } } } + +# GITHUB_TOKEN and GITHUB_BASE_URL are injected as env vars by the Lambda. +# insecure = true is required because the Census GHE TLS certificate is signed +# by the Census internal CA, which is not in the CodeBuild container trust store. +provider "github" { + insecure = true +}