ci: enable cra scan (#103)

Author: jor2

.github/workflows/ci.yml

@@ -15,3 +15,6 @@ jobs:
   call-terraform-ci-pipeline:
     uses: terraform-ibm-modules/common-pipeline-assets/.github/workflows/[email protected]
     secrets: inherit
+    with:
+        craTarget: "examples/multizone-rule"
+        craGoalIgnoreFile: "cra-tf-validate-ignore-goals.json"

cra-tf-validate-ignore-goals.json

@@ -0,0 +1,10 @@
+{
+    "scc_goals": [
+        {
+            "scc_goal_id": "3000408",
+            "description": "Check whether Flow Logs for VPC are enabled",
+            "ignore_reason": "This is part of the test example and not the current module",
+            "is_valid": false
+        }
+    ]
+}

examples/multizone-rule/main.tf

@@ -25,18 +25,10 @@ resource "ibm_is_vpc" "example_vpc" {
   tags           = var.resource_tags
 }
 
-resource "ibm_is_public_gateway" "testacc_gateway" {
-  name           = "${var.prefix}-pgateway"
-  vpc            = ibm_is_vpc.example_vpc.id
-  zone           = "${var.region}-1"
-  resource_group = module.resource_group.resource_group_id
-}
-
 resource "ibm_is_subnet" "testacc_subnet" {
   name                     = "${var.prefix}-subnet"
   vpc                      = ibm_is_vpc.example_vpc.id
   zone                     = "${var.region}-1"
-  public_gateway           = ibm_is_public_gateway.testacc_gateway.id
   total_ipv4_address_count = 256
   resource_group           = module.resource_group.resource_group_id
 }