name: validation

on:
  push:
  pull_request:

permissions:
  contents: read

jobs:
  verify:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: hashicorp/setup-terraform@v3
        with:
          terraform_version: 1.6.6
      - name: Terraform format
        run: terraform fmt -check -recursive terraform
      - name: Terraform init
        working-directory: terraform
        run: terraform init -backend=false
      - name: Terraform validate
        working-directory: terraform
        run: terraform validate
      - uses: actions/setup-python@v5
        with:
          python-version: '3.12'
      - name: Install quality tools
        run: python -m pip install --disable-pip-version-check ruff==0.6.9 mypy==1.11.2 pytest==8.3.3
      - name: Lint
        run: ruff check .
      - name: Type-check
        run: mypy .
      - name: Tests
        run: pytest -q