test_repository_file_encrypted.yml

name: Test Terraform State Repository File Encrypted
on:
  workflow_dispatch:
  push:

jobs:
  test_repository_file_encrypted:
    runs-on: ubuntu-latest
    name: Test Terraform State Repository File Encrypted
    steps:
    - name: Checkout repository
      uses: actions/checkout@v2
      with:
        token: ${{ secrets.GITHUB_TOKEN }

    - name: Decrypt Repository File
      uses: badgerhobbs/terraform-state@main
      with:
        encryption_key: ${{ secrets.encryption_key }}
        operation: download
        location: repository
      continue-on-error: true

    - name: Configure Terraform
      uses: hashicorp/setup-terraform@v2

    - name: Initialize Terraform
      run: terraform init

    - name: Run Terraform Plan
      run: |
        terraform plan -var="run_id=${{ github.run_id }}"

    - name: Run Terraform Apply
      run: |
        terraform apply -auto-approve -var="run_id=${{ github.run_id }}"

    - name: Encrypt and Commit Repository File
      uses: badgerhobbs/terraform-state@main
      with:
        encryption_key: ${{ secrets.encryption_key }}
        operation: upload
        location: repository