ci: remove ggshield iac

.github/workflows/main.yml

@@ -9,10 +9,10 @@ jobs:
     steps:
       - uses: actions/checkout@v2
 
-      - name: Set up Python 3.8
+      - name: Set up Python 3.10
         uses: actions/setup-python@v1
         with:
-          python-version: 3.8
+          python-version: "3.10"
 
       - name: Install dependencies
         run: |
@@ -38,10 +38,10 @@ jobs:
     steps:
       - uses: actions/checkout@v2
 
-      - name: Set up Python 3.8
+      - name: Set up Python 3.10
         uses: actions/setup-python@v1
         with:
-          python-version: 3.8
+          python-version: "3.10"
 
       - name: Install dependencies
         run: |
@@ -86,17 +86,3 @@ jobs:
           GITHUB_PULL_BASE_SHA: ${{ github.event.pull_request.base.sha }}
           GITHUB_DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
           GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }}
-
-  ggshield-iac:
-    name: Check for iac vulnerabilities with ggshield
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v2
-
-      - name: GitGuardian iac scan test
-        uses: GitGuardian/gg-shield/actions/iac@main
-        with:
-          args: ./
-        env:
-          GITHUB_DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
-          GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }}

.pre-commit-config.yaml

@@ -14,7 +14,7 @@ repos:
       - id: check-yaml
       - id: check-merge-conflict
 
-  - repo: https://gitlab.com/pycqa/flake8
+  - repo: https://github.com/pycqa/flake8
     rev: 4.0.1
     hooks:
       - id: flake8
@@ -27,7 +27,7 @@ repos:
         args: [--filter-files, --settings-path, ./lambda/setup.cfg]
 
   - repo: https://github.com/commitizen-tools/commitizen
-    rev: v2.20.0
+    rev: v4.8.3
     hooks:
       - id: commitizen
         stages: [commit-msg]
@@ -38,7 +38,7 @@ repos:
       - id: prettier
 
   - repo: https://github.com/gitguardian/ggshield
-    rev: v1.15.1
+    rev: v1.41.0
     hooks:
       - id: ggshield
         language_version: python3

lambda.tf

@@ -36,7 +36,7 @@ module "lambda_function" {
   ]
   function_name = local.lambda_function_name
   handler       = "entrypoint.lambda_handler"
-  runtime       = "python3.8"
+  runtime       = "python3.10"
   timeout       = 90
   publish       = true
 

lambda/Pipfile

@@ -8,7 +8,7 @@ boto3 = "*"
 
 [dev-packages]
 types-boto3 =  "*"
-"moto[s3,iam,ses]" = "*"
+"moto[s3,iam,ses]" = "<5"
 pytest = "*"
 black = "==22.3.0"
 flake8 = "*"
@@ -20,4 +20,4 @@ isort = "==5.9.3"
 pipfile-requirements = "*"
 
 [requires]
-python_version = "3.8"
+python_version = "3"