OpenTofu/Terraform via Pull Request

Version updated for DevSecTop/TF-via-PR to version v10.3.0.

• This action is used across all versions by 2 repositories.

Go to the GitHub Marketplace to find the latest changes.

Release notes

Added

• Output comment_summary of TF output (e.g., “Plan: 1 to add, 0 to change, 0 to destroy.”)
  • Requires checks: write permission.
• Copy TF output to the job summary for easier access within GitHub Actions > Jobs.

Changed

• (meta) Dependabot configuration to keep Terraform dependencies up-to-date in a group (until OpenTofu catches up).
• (meta) Formatted yml → yaml workflows for consistency and legibility.

Security

• Explicitly list all 3 GitHub Actions used by this workflow and the steps taken to prevent supply chain attacks from upstream dependencies:
  1. actions/cache
  2. actions/github-script
  3. actions/upload-artifact

Commits changelog: https://github.com/DevSecTop/TF-via-PR/compare/v10.2.0...v10.3.0

• devsectop
• GitHub Actions