From 8fceca9f891ccff77dd600796301c32275a26e60 Mon Sep 17 00:00:00 2001 From: Dave Arnold Date: Thu, 23 Jul 2026 16:42:34 -0400 Subject: [PATCH] feat: pass GitHub App credentials to terraform-validate action for SSH module pulls - Pass GH_APP_PEM_FILE, GH_APP_INSTALLATION_ID, GH_APP_ID to CSVD/terraform-validate - Action now handles gh-auth + insteadOf git config internally - Fixes SSH host key verification failures during terraform init - Resolves CSVDIES-10490 --- .github/workflows/terraform-validate.yaml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/.github/workflows/terraform-validate.yaml b/.github/workflows/terraform-validate.yaml index ac349eb..e8f6d03 100644 --- a/.github/workflows/terraform-validate.yaml +++ b/.github/workflows/terraform-validate.yaml @@ -4,7 +4,6 @@ on: workflow_dispatch: jobs: - terraform-validate: runs-on: "229685449397" permissions: @@ -16,11 +15,15 @@ jobs: - name: Setup Terraform uses: CSVD/gh-actions-setup-terraform@v2 with: - terraform_version: '1.10.5' + terraform_version: "1.10.5" - name: Validate Terraform Configuration id: validate uses: CSVD/terraform-validate@main + with: + github_app_pem_file: ${{ secrets.GH_APP_PEM_FILE }} + github_app_installation_id: ${{ vars.GH_APP_INSTALLATION_ID }} + github_app_id: ${{ vars.GH_APP_ID }} - name: Check Validation/Test Results if: always()