Terraform for GitHub repo branch protection

main.tf

terraform {
  required_providers {
    github = {
      source  = "integrations/github"
      version = "~> 4.0"
    }
  }
}

# Configure the GitHub Provider
provider "github" {
  owner = var.gh_org
}

# Set protection
resource "github_branch_protection" "at_repos" {
  count                         = "${length(var.at_repos)}"
  repository_id                 = "${var.at_repos[count.index]}"
  pattern                       = "trunk"
  enforce_admins                = "true"
  required_pull_request_reviews {
    dismiss_stale_reviews  = true
    required_approving_review_count = 1
  }
}

terraform.tfvars

gh_org = "atsign-foundation"
at_repos = [
"at_pico_w",
"at_widgets",
"atmosphere_pro",
"at_client_sdk",
"at_server",
"at_wavi_app",
"at_tools",
"at_mono",
"at_java",
"at_libraries",
"at_services",
"private_fit",
"arrive",
"sshnoports",
"at_talk",
"atsign.dev-3.0",
"iot.atsign.dev",
"at_app",
"at_protocol",
"FHIR-atHack",
"dess",
"privatefit",
"open_source_app_default",
"at_email",
"at_dude",
"mwc_demo",
"at_demos",
"atsign.dev",
"at-bot",
"max30101",
]

variables.tf

variable "gh_org" {
  type = string
}

variable "at_repos" {
  type = list
}