1941348 - Allowing GitHub Action hashicorp/setup-terraform@v3 in mozilla and mozilla-it

Status: RESOLVED FIXED

(mozilla.org :: Github: Administration, task)

Description

[Brett Kochendorfer]

Github removed terraform from their default installation for ubuntu-latest. We would like to allow the use of hashicorp/setup-terraform@v3 at the organization level so that we can install terraform at startup for our GitHub actions that require terraform.

Related Jira Ticket: https://mozilla-hub.atlassian.net/browse/OPST-1818

Hopefully I filed this in the correct place, thank you!

Comment 1

[Chris Knowles [:cknowles]]

Right place - for future cases there's a template for action requests here

Link to the action - https://github.com/hashicorp/setup-terraform

Action is NOT in the pre-approved list here

Since this is an action, that would have potential impact for all the orgs involved, handing this to security for their perusal/questions/approval.

Clovis - please let us know what you think.

Comment 2

[Clovis Foji]

I am approving this action v3 "hashicorp/setup-terraform@v3" . I will add this to the list of approved actions.

Comment 3

[Chris Knowles [:cknowles]]

It has been allowed in mozilla and mozilla-it.

I'm leaving this open until the approved action list is updated.

Comment 4

[Chris Knowles [:cknowles]]

This has been added to the approved list.