feat: update to v2 pipeline (#539)

Author: daniel-butler-irl

.github/settings.yml

@@ -5,7 +5,7 @@
 # any change of this settings.yml file is detected by the GitHub App and
 # the settings of this repository are updated immediately.
 #
-_extends: repo-settings:.github/common-settings.yml
+_extends: repo-settings:.github/common-settings-v2.yml
 
 # repo-specific settings
 #

.github/workflows/ci.yml

@@ -1,20 +1,16 @@
 name: CI-Pipeline
 
-# Controls when the workflow will run
+# Controls when the workflow will run, when comment is created
 on:
-  # Triggers the workflow on push or pull request events but only for the main branch
-  push:
-    branches: [main]
-  pull_request:
-    branches: [main]
-
-  # Allows you to run this workflow manually from the Actions tab
-  workflow_dispatch:
+  issue_comment:
+    types:
+      - created
 
 jobs:
   call-terraform-ci-pipeline:
-    uses: terraform-ibm-modules/common-pipeline-assets/.github/workflows/common-terraform-module-ci.yml@v1.9.1
+    uses: terraform-ibm-modules/common-pipeline-assets/.github/workflows/common-terraform-module-ci-v2.yml@v1.10.0
     secrets: inherit
     with:
+      craSCCv2: true
       craTarget: "examples/default"
-      craGoalIgnoreFile: "cra-tf-validate-ignore-goals.json"
+      craRuleIgnoreFile: "cra-tf-validate-ignore-rules.json"

.github/workflows/release.yml

@@ -13,5 +13,5 @@ on:
 jobs:
   call-terraform-release-pipeline:
     if: ${{ github.event_name == 'workflow_dispatch' || (github.event_name == 'workflow_run' && github.event.workflow_run.conclusion == 'success') }}
-    uses: terraform-ibm-modules/common-pipeline-assets/.github/workflows/common-release.yml@v1.9.1
+    uses: terraform-ibm-modules/common-pipeline-assets/.github/workflows/common-release.yml@v1.10.0
     secrets: inherit

cra-tf-validate-ignore-goals.json

@@ -0,0 +1,3 @@
+{
+    "scc_rules": []
+}