pre-commit-update.yml

name: Pre-Commit update
run-name: "Update Pre-Commit dependencies"

permissions:
  contents: write
  pull-requests: write

on:
  workflow_dispatch:
  schedule:
    - cron: 0 1 1 * * # 1am of every 1st day of every month

jobs:
  update:
    name: "Update Pre-Commit dependencies"
    uses: PaloAltoNetworks/terraform-modules-swfw-ci-workflows/.github/workflows/_pre-commit-update.yml@v2.3

  pre-commit:
    name: Run Pre-Commit with the udpated config
    needs: [update]
    if: needs.update.outputs.pr_operation == 'created' || needs.update.outputs.pr_operation == 'updated'
    uses: PaloAltoNetworks/terraform-modules-swfw-ci-workflows/.github/workflows/_pre_commit.yml@v2.3
    with:
      pre-commit-hooks: terraform_fmt terraform_docs terraform_tflint checkov
      branch: pre-commit-dependencies-update

  comment-pr:
    name: Give comment on the PR if pre-commit failed
    needs: [pre-commit, update]
    if: always() && (needs.pre-commit.result == 'failure' || needs.pre-commit.result == 'success')
    uses: PaloAltoNetworks/terraform-modules-swfw-ci-workflows/.github/workflows/_comment_pr.yml@v2.3
    with:
      pr_number: ${{ needs.update.outputs.pr_number }}
      job_result: ${{ needs.pre-commit.result }}