feat: replace export-aws-secrets-manager to get-secrets

.cmdx.yaml

@@ -2,22 +2,41 @@
 # cmdx - task runner
 # https://github.com/suzuki-shunsuke/cmdx
 tasks:
-- name: release
-  short: r
-  description: release the new version
-  usage: release the new version
-  script: gh workflow run release.yaml -f tag={{.version}}
-  args:
-  - name: version
-    required: true
-    validate:
-    - regexp: "^v\\d+\\.\\d+.\\d+(-\\d+)?$"
-- name: schema
-  description: build JSON Schema
-  usage: build JSON Schema
-  require:
-    exec:
-    - generate-schema-doc
-  script: |
-    mkdir -p build
-    generate-schema-doc --expand-buttons --link-to-reused-ref schema build
+  - name: release
+    short: r
+    description: release the new version
+    usage: release the new version
+    script: gh workflow run release.yaml -f tag={{.version}}
+    args:
+      - name: version
+        required: true
+        validate:
+          - regexp: "^v\\d+\\.\\d+.\\d+(-\\d+)?$"
+  - name: schema
+    description: build JSON Schema
+    usage: build JSON Schema
+    require:
+      exec:
+        - generate-schema-doc
+    script: |
+      mkdir -p build
+      generate-schema-doc --expand-buttons --link-to-reused-ref schema build
+  - name: build
+    description: build TypeScript
+    usage: build TypeScript
+    script: |
+      set -euo pipefail
+      pushd lib
+      npm run build
+      popd
+      for dir in $(git ls-files | grep package.json | grep -v -E '^package\.json' | grep -v lib/package.json | xargs -n 1 dirname); do
+        pushd "$dir"
+        npm run build
+        popd
+      done
+
+  - name: fmt
+    description: Format with prettier
+    usage: Format with prettier
+    script: |
+      npm run fmt

.github/workflows/create-pr-branch.yaml

@@ -4,7 +4,7 @@ on:
   workflow_dispatch:
     inputs:
       pr:
-        description: 'Pull Request Number'
+        description: "Pull Request Number"
         required: true
 jobs:
   create-pr-branch:

.github/workflows/prerelease-pr.yaml

@@ -4,10 +4,10 @@ on:
   workflow_dispatch:
     inputs:
       tag:
-        description: 'tag'
+        description: "tag"
         required: true
       pr:
-        description: 'pr number'
+        description: "pr number"
         required: true
 permissions:
   contents: write

.github/workflows/release.yaml

@@ -4,12 +4,12 @@ on:
   workflow_dispatch:
     inputs:
       tag:
-        description: 'tag'
+        description: "tag"
         required: true
       ref:
-        description: 'released ref (branch, tag or SHA). By default, the default branch is used'
+        description: "released ref (branch, tag or SHA). By default, the default branch is used"
         required: false
-        default: ''
+        default: ""
 permissions:
   contents: write
 jobs:

.github/workflows/wc-create-pr-branch.yaml

@@ -4,7 +4,7 @@ on:
   workflow_call:
     inputs:
       pr:
-        description: 'Pull Request Number'
+        description: "Pull Request Number"
         required: true
         type: number
     secrets:

.github/workflows/wc-test-get-target-config.yaml

@@ -16,12 +16,11 @@ jobs:
         env:
           TFACTION_CONFIG: get-target-config/tests/config-1.yaml
           TFACTION_TARGET: aws/foo
-          TFACTION_IA_APPLY: 'false'
-          TFACTION_JOB_TYPE: 'terraform'
+          TFACTION_IA_APPLY: "false"
+          TFACTION_JOB_TYPE: "terraform"
       - run: echo "${{ steps.target-config.outputs.working_directory }}"
       - run: echo "${{ steps.target-config.outputs.aws_assume_role_arn }}"
       - run: echo "${{ steps.target-config.outputs.aws_region }}"
-      - run: echo "${{ steps.target-config.outputs.s3_bucket_name_plan_file }}"
       - run: echo "${{ steps.target-config.outputs.s3_bucket_name_tfmigrate_history }}"
       - run: echo "${{ steps.target-config.outputs.template_dir }}"
 
@@ -38,9 +37,8 @@ jobs:
         env:
           TFACTION_CONFIG: get-target-config/tests/config-1.yaml
           TFACTION_TARGET: gcp/foo
-          TFACTION_IA_APPLY: 'false'
-          TFACTION_JOB_TYPE: 'terraform'
+          TFACTION_IA_APPLY: "false"
+          TFACTION_JOB_TYPE: "terraform"
       - run: echo "${{ steps.target-config.outputs.working_directory }}"
-      - run: echo "${{ steps.target-config.outputs.gcs_bucket_name_plan_file }}"
       - run: echo "${{ steps.target-config.outputs.gcs_bucket_name_tfmigrate_history }}"
       - run: echo "${{ steps.target-config.outputs.template_dir }}"

.prettierignore

@@ -0,0 +1 @@
+**/dist

apply/action.yaml

@@ -2,18 +2,23 @@ name: apply
 description: apply
 inputs:
   github_token:
-    description: 'GitHub Access Token'
+    description: "GitHub Access Token"
     required: false
     default: ${{ github.token }}
+  secrets:
+    required: false
+    default: "{}"
 runs:
   using: composite
   steps:
     - uses: suzuki-shunsuke/tfaction/terraform-apply@main
       if: env.TFACTION_JOB_TYPE == 'terraform'
       with:
         github_token: ${{inputs.github_token}}
+        secrets: ${{inputs.secrets}}
 
     - uses: suzuki-shunsuke/tfaction/tfmigrate-apply@main
       if: env.TFACTION_JOB_TYPE == 'tfmigrate'
       with:
         github_token: ${{inputs.github_token}}
+        secrets: ${{inputs.secrets}}

aqua/actionlint.yaml

@@ -1,2 +1,2 @@
 packages:
-- name: rhysd/[email protected]
+  - name: rhysd/[email protected]

check-terraform-skip/action.yaml

@@ -2,17 +2,17 @@ name: Check if terraform plan and apply are skipped
 description: Check if terraform plan and apply are skipped
 inputs:
   labels:
-    description: 'Labels File'
+    description: "Labels File"
     required: true
   skip_label_prefix:
-    description: 'Skip Label Prefix'
+    description: "Skip Label Prefix"
     required: true
   pr_author:
-    description: 'Pull Request Author'
+    description: "Pull Request Author"
     required: true
 outputs:
   skip_terraform:
     description: whether terraform is skipped
 runs:
-  using: 'node20'
-  main: 'dist/index.js'
+  using: "node20"
+  main: "dist/index.js"