name: Tofu format

on:
  workflow_dispatch: { }
  push:
    branches: [ '**', '!renovate/**' ]
    paths:
      - '**.tf'
      - '**.tofu'
      - '**.tfvars'
      - '**.tftpl'
  pull_request:
    types: [ opened, synchronize ]
    branches: [ '**' ]
    paths:
      - '**.tf'
      - '**.tofu'
      - '**.tfvars'
      - '**.tftpl'

jobs:
  tofu-format:
    name: run tofu format
    runs-on: ubuntu-latest
    container: ghcr.io/vehagn/homelab-devcontainer
    permissions:
      contents: read

    steps:
      - name: Checkout
        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: Tofu format
        run: tofu fmt -recursive -diff -check