diff --git a/modules/private_repository/repository.tf b/modules/private_repository/repository.tf index 45e1cc1..bab5cdf 100644 --- a/modules/private_repository/repository.tf +++ b/modules/private_repository/repository.tf @@ -18,6 +18,7 @@ module "repository_base" { protected_branches = var.protected_branches delete_head_on_merge = var.delete_head_on_merge allow_auto_merge = var.allow_auto_merge + requires_web_commit_signing = var.requires_web_commit_signing secret_scanning = true secret_scanning_on_push = true diff --git a/modules/private_repository/variables.tf b/modules/private_repository/variables.tf index ec040b5..f6c6fff 100644 --- a/modules/private_repository/variables.tf +++ b/modules/private_repository/variables.tf @@ -50,6 +50,12 @@ variable "allow_auto_merge" { default = true } +variable "requires_web_commit_signing" { + description = "If set commit signatures are required for commits to the organization. Defaults to `false`." + type = bool + default = false +} + variable "dependabot_security_updates" { description = "Enables dependabot security updates. Only works when `has_vulnerability_alerts` is set because that is required to enable dependabot for the repository." type = bool @@ -188,4 +194,4 @@ variable "rulesets" { enforcement = string })) default = {} -} \ No newline at end of file +} diff --git a/modules/public_repository/repository.tf b/modules/public_repository/repository.tf index 7acc30e..64a8699 100644 --- a/modules/public_repository/repository.tf +++ b/modules/public_repository/repository.tf @@ -18,6 +18,7 @@ module "repository_base" { protected_branches = var.protected_branches delete_head_on_merge = var.delete_head_on_merge allow_auto_merge = var.allow_auto_merge + requires_web_commit_signing = var.requires_web_commit_signing secret_scanning = true secret_scanning_on_push = true @@ -35,4 +36,4 @@ module "repository_base" { license_template = var.license_template rulesets = var.rulesets -} \ No newline at end of file +} diff --git a/modules/public_repository/variables.tf b/modules/public_repository/variables.tf index ba047b8..87360d0 100644 --- a/modules/public_repository/variables.tf +++ b/modules/public_repository/variables.tf @@ -50,6 +50,12 @@ variable "allow_auto_merge" { default = true } +variable "requires_web_commit_signing" { + description = "If set commit signatures are required for commits to the organization. Defaults to `false`." + type = bool + default = false +} + variable "dependabot_security_updates" { description = "Enables dependabot security updates. Only works when `has_vulnerability_alerts` is set because that is required to enable dependabot for the repository." type = bool @@ -188,4 +194,4 @@ variable "rulesets" { enforcement = string })) default = {} -} \ No newline at end of file +} diff --git a/modules/repository_base/repository.tf b/modules/repository_base/repository.tf index b67e2a7..cce806b 100644 --- a/modules/repository_base/repository.tf +++ b/modules/repository_base/repository.tf @@ -25,6 +25,7 @@ resource "github_repository" "repository" { homepage_url = var.homepage delete_branch_on_merge = var.delete_head_on_merge allow_auto_merge = var.allow_auto_merge + web_commit_signoff_required = var.requires_web_commit_signing license_template = var.license_template diff --git a/modules/repository_base/variables.tf b/modules/repository_base/variables.tf index 9a49ac2..88d8146 100644 --- a/modules/repository_base/variables.tf +++ b/modules/repository_base/variables.tf @@ -86,6 +86,12 @@ variable "allow_auto_merge" { default = true } +variable "requires_web_commit_signing" { + description = "If set commit signatures are required for commits to the organization. Defaults to `false`." + type = bool + default = false +} + variable "visibility" { description = "Sets the visibility property of a repository. Defaults to \"private\"" type = string @@ -242,4 +248,4 @@ variable "rulesets" { enforcement = string })) default = {} -} \ No newline at end of file +} diff --git a/modules/repository_set/variables.tf b/modules/repository_set/variables.tf index 5d7a6ab..30ab1c9 100644 --- a/modules/repository_set/variables.tf +++ b/modules/repository_set/variables.tf @@ -10,6 +10,7 @@ variable "private_repositories" { homepage = string delete_head_on_merge = bool allow_auto_merge = bool + requires_web_commit_signing = bool dependabot_security_updates = bool organization_action_secrets = optional(list(string)) organization_codespace_secrets = optional(list(string)) @@ -151,4 +152,4 @@ variable "rulesets" { repositories = list(string) })) default = {} -} \ No newline at end of file +}