Merge branch 'main' of https://github.com/turbot/guardrails-samples i…

…nto rds-policy-packs

.github/ISSUE_TEMPLATE/policy-pack---create-bug-report.md

@@ -0,0 +1,28 @@
+---
+name: Policy Pack - Bug report
+about: Create a bug report for a policy pack
+title: <policy_pack_name> - <Short description>
+labels: bug
+assignees: ''
+
+---
+
+**Describe the bug**
+A clear and concise description of what the bug is.
+
+**To reproduce**
+Steps to reproduce the behaviour:
+1. Go to '...'
+2. Click on '...'
+3. Scroll down to '...'
+4. Run the command '...'
+5. See error
+
+**Expected behavior**
+A clear and concise description of what you expected to happen.
+
+**Screenshots**
+If applicable, add screenshots to help explain your problem.
+
+**Additional context**
+Add any other context about the problem here.

.github/ISSUE_TEMPLATE/policy-pack---create-new-pack.md

@@ -0,0 +1,20 @@
+---
+name: Policy Pack - New policy pack
+about: Suggest a new policy pack
+title: Add policy pack - <Short description>
+labels: enhancement
+assignees: ''
+
+---
+
+**Control objective**
+A clear and concise description of what the control objective is and why it's important.
+
+**Remediation**
+The remediation action(s) to satisfy the control objective.
+
+**Categories**
+Proposed primary category and categories from the [available list of categories](https://github.com/turbot/guardrails-samples/tree/main/policy_packs#readmemd).
+
+**Additional context**
+Add any other context about the problem here.

.github/workflows/baselines.yml

@@ -0,0 +1,52 @@
+name: Baselines
+
+on:
+  workflow_dispatch:
+    inputs:
+      dryRun:
+        description: Set to true for a dry run
+        required: false
+        default: "false"
+        type: string
+  push:
+    paths:
+      - baselines/**
+
+jobs:
+  terraform:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+
+      - name: Setup Terraform
+        uses: hashicorp/setup-terraform@v2
+        # with:
+        # terraform_version: 1.4.6
+
+      - name: Set Turbot credentials
+        run: |
+          echo "TURBOT_WORKSPACE=${{ secrets.TURBOT_WORKSPACE }}" >> $GITHUB_ENV
+          echo "TURBOT_ACCESS_KEY=${{ secrets.TURBOT_ACCESS_KEY }}" >> $GITHUB_ENV
+          echo "TURBOT_SECRET_KEY=${{ secrets.TURBOT_SECRET_KEY }}" >> $GITHUB_ENV
+
+      - name: Find all Terraform folders
+        id: find_folders
+        run: |
+          folders=$(find baselines -type d -name "*.tf" -exec dirname {} \; | sort -u)
+          echo "folders=$folders" >> $GITHUB_ENV
+          echo "::set-output name=folders::$folders"
+
+      - name: Run Terraform
+        run: |
+          for folder in ${{ steps.find_folders.outputs.folders }}; do
+            cd $folder
+            terraform init
+            if [[ "$folder" == *"mods"* ]]; then
+              terraform apply -auto-approve -parallelism=1
+            else
+              terraform apply -auto-approve
+            fi
+            cd - > /dev/null
+          done

.github/workflows/stale.yml

@@ -0,0 +1,17 @@
+name: Stale Issues and PRs
+on:
+  schedule:
+    - cron: "30 23 * * *"
+  workflow_dispatch:
+    inputs:
+      dryRun:
+        description: Set to true for a dry run
+        required: false
+        default: "false"
+        type: string
+
+jobs:
+  stale_workflow:
+    uses: turbot/steampipe-workflows/.github/workflows/stale.yml@main
+    with:
+      dryRun: ${{ github.event.inputs.dryRun }}

.gitignore

@@ -29,7 +29,6 @@ Temporary Items
 
 ### Node ###
 # Logs
-logs
 *.log
 npm-debug.log*
 yarn-debug.log*