Approvals

The module creates one GitHub environment per workspace, each with required reviewers unless it is in auto_apply. The action's pending step refuses an environment without them unless its workspace is in the step's auto-apply, so an apply never starts unapproved by mistake.

module "tacos" {
  source = "github.com/femiwiki/terraform-github-tacos?ref=v0.7.0"

  repository     = "infra"
  environments   = ["network", "dns"]
  reviewer_teams = [github_team.deployer.id]
}

Permissions

step	Permissions
plan	contents: read, pull-requests: read
pending	actions: write, checks: read; also pull-requests: read with apply-before-merge
apply	actions: read, contents: read, pull-requests: read
merge	actions: read, contents: write, deployments: read, pull-requests: write
collapse	pull-requests: write

PreviousAuto apply

NextDependabot