From 14504c773fcc49c06c004e374e19cc85c22d2b61 Mon Sep 17 00:00:00 2001 From: panicboat Date: Fri, 23 Oct 2026 22:46:15 +0900 Subject: [PATCH 1/2] chore(github/repository): manage vulnerability alerts with their own resource Claude-Session: https://claude.ai/code/session_01ExEZK1E7L1oW9CCyLm5fqD Signed-off-by: panicboat --- github/repository/modules/main.tf | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/github/repository/modules/main.tf b/github/repository/modules/main.tf index 58649127..8bc393de 100644 --- a/github/repository/modules/main.tf +++ b/github/repository/modules/main.tf @@ -9,8 +9,6 @@ resource "github_repository" "repository" { has_wiki = each.value.features.wiki has_projects = each.value.features.projects - vulnerability_alerts = true - allow_merge_commit = false allow_squash_merge = true allow_rebase_merge = false @@ -24,6 +22,12 @@ resource "github_repository" "repository" { archived = false } +resource "github_repository_vulnerability_alerts" "repository" { + for_each = github_repository.repository + + repository = each.value.name +} + resource "github_workflow_repository_permissions" "repository" { for_each = { for k, v in var.repositories : From 140b11470ccf6364081c4729aec5521a68be591e Mon Sep 17 00:00:00 2001 From: panicboat Date: Fri, 23 Oct 2026 22:58:59 +0900 Subject: [PATCH 2/2] chore(github/repository): reference only the repository name for vulnerability alerts Claude-Session: https://claude.ai/code/session_01ExEZK1E7L1oW9CCyLm5fqD Signed-off-by: panicboat --- github/repository/modules/main.tf | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/github/repository/modules/main.tf b/github/repository/modules/main.tf index 8bc393de..d52908d2 100644 --- a/github/repository/modules/main.tf +++ b/github/repository/modules/main.tf @@ -23,9 +23,9 @@ resource "github_repository" "repository" { } resource "github_repository_vulnerability_alerts" "repository" { - for_each = github_repository.repository + for_each = var.repositories - repository = each.value.name + repository = github_repository.repository[each.key].name } resource "github_workflow_repository_permissions" "repository" {