From 4b0a93fa3a87bfd38e66ece7e915b241d5e02021 Mon Sep 17 00:00:00 2001 From: Gary Crye Date: Tue, 27 Oct 2026 15:39:44 -0600 Subject: [PATCH 1/2] ci: grant permissions for Trivy SARIF uploads to GHAS Refs: https://github.com/byu-oit/github-action-tf-plan-analyzer/pull/196 --- .github/workflows/ci.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 6d6b4dc..78eb0b4 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -66,6 +66,7 @@ jobs: actions: read pull-requests: write id-token: write + security-events: write steps: - uses: actions/checkout@v4 From 8266d095428a602566aa9ede1485d9c5ec469d69 Mon Sep 17 00:00:00 2001 From: Gary Crye Date: Tue, 27 Oct 2026 15:39:45 -0600 Subject: [PATCH 2/2] ci: remove deprecated `tf-plan-analyzer` inputs `terraform-plan-file`, `divvycloud-username`, and `divvycloud-password` are no longer needed. Refs: https://github.com/byu-oit/github-action-tf-plan-analyzer/pull/196 --- .github/workflows/ci.yml | 3 --- 1 file changed, 3 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 78eb0b4..275f82c 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -101,7 +101,4 @@ jobs: - name: Analyze Terraform Plan uses: byu-oit/github-action-tf-plan-analyzer@v2 with: - divvycloud-username: ${{ secrets.DIVVYCLOUD_USERNAME }} - divvycloud-password: ${{ secrets.DIVVYCLOUD_PASSWORD }} working-directory: ${{ matrix.env.tf_working_dir }} - terraform-plan-file: plan.tfplan