feat: Changing to AutoTag for version bumps (#9)

Author: methridge

.github/dependabot.yaml

@@ -18,13 +18,19 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: "lts/*"
-      - name: Install dependencies
-        run: npm install
-      - name: Release
+
+      - name: fetch tags
+        run: git fetch --force --tags
+
+      - name: install autotag binary
+        run: |
+          curl -sL https://git.io/autotag-install | sudo sh -s -- -b /usr/local/bin
+
+      - name: increment tag and create release
+        run: |
+          set -eou pipefail
+
+          new_version=$(autotag -vn)
+          gh release create v"${new_version}" --target main --title "v${new_version}" --generate-notes
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: npx semantic-release
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/main-release.yaml

@@ -9,12 +9,12 @@ repos:
         pass_filenames: false
         stages: ["commit", "push"]
   - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v4.4.0
+    rev: v4.5.0
     hooks:
       - id: check-merge-conflict
       - id: end-of-file-fixer
   - repo: https://github.com/antonbabenko/pre-commit-terraform
-    rev: v1.77.1
+    rev: v1.83.5
     hooks:
       - id: terraform_fmt
       - id: terraform_validate
@@ -27,10 +27,6 @@ repos:
         args:
           - --args=--config=__GIT_WORKING_DIR__/.tflint.hcl
       - id: terraform_checkov
-      - id: terraform_tfsec
-        args:
-          - --args=--config-file=__GIT_WORKING_DIR__/.tfsec.json
-          - --args=--tfvars-file="terraform.tfvars"
       - id: infracost_breakdown
         args:
           - --args=--path=.

.pre-commit-config.yaml

@@ -28,6 +28,10 @@ I use a wide array of tools to make things easier for me.
 - [trufflehog](https://github.com/trufflesecurity/trufflehog): Scans your git
   repo for committed secrets 😱.
   - `brew install trufflesecurity/trufflehog/trufflehog`
+- [autotag](https://github.com/pantheon-systems/autotag): Automatically creates
+  git tags based on the commit message. Used to create semantic version tags in
+  GitHub Actions pipeline. (Not installed locally, but you could)
+  - `brew install pantheon-systems/autotag/autotag`
 
 ### Tools needed for the Pre-commit hooks that I use
 
@@ -99,8 +103,6 @@ options.
 
 `TFLint`: Review `.tflint.hcl`
 
-`TFSec`: Review `.tfsec.yml`
-
 `Task`: Review `Taskfile.yaml` and or remove tasks.
 
 `Terraform`: Rename `terraform.tfvars.example` to `terraform.tfvars` and update.
@@ -114,13 +116,14 @@ The following two lines specify where the `terraform-docs` dynamic content will
 be placed.
 
 <!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+
 ## Requirements
 
-| Name | Version |
-|------|---------|
-| terraform | ~> 1.0 |
-| google | ~>4.55 |
-| hcp | ~>0.54 |
+| Name      | Version |
+| --------- | ------- |
+| terraform | ~> 1.0  |
+| google    | ~>4.55  |
+| hcp       | ~>0.54  |
 
 ## Providers
 
@@ -141,4 +144,5 @@ No inputs.
 ## Outputs
 
 No outputs.
+
 <!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->

.tfsec.yml

@@ -24,12 +24,6 @@ tasks:
     cmds:
       - pre-commit run -a
 
-  push:
-    cmds:
-      - git push
-      - git tag -s {{.CLI_ARGS}} -m "{{.CLI_ARGS}}"
-      - git push --tags
-
   tag:
     cmds:
       - git push