From f76ef2e9c883f0d0ed351307d67053c096c31a7c Mon Sep 17 00:00:00 2001 From: Dave Arnold Date: Wed, 24 Jun 2026 12:38:29 -0400 Subject: [PATCH] ci: add ssh:// insteadOf rule to cover Terraform URL normalization Terraform normalizes SCP-style SSH sources (git@host:path) to ssh:// URLs before invoking git, so the previous insteadOf rule for 'git@github.e.it.census.gov:' did not match. Added a second rule for 'ssh://git@github.e.it.census.gov/' so both URL forms are rewritten to authenticated HTTPS. --- .github/workflows/terraform-validate.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/terraform-validate.yaml b/.github/workflows/terraform-validate.yaml index fbf70f3..326f217 100644 --- a/.github/workflows/terraform-validate.yaml +++ b/.github/workflows/terraform-validate.yaml @@ -24,6 +24,7 @@ jobs: - name: Configure Git HTTPS for Terraform module pulls run: | git config --global url."https://oauth2:${{ steps.github_credentials.outputs.github_token }}@github.e.it.census.gov/".insteadOf "git@github.e.it.census.gov:" + git config --global url."https://oauth2:${{ steps.github_credentials.outputs.github_token }}@github.e.it.census.gov/".insteadOf "ssh://git@github.e.it.census.gov/" - name: Setup Terraform uses: CSVD/gh-actions-setup-terraform@v2