cs-pr-what-if.yml

---
name: CS PR Check Environment Bicep What-If
env:
  DEPLOY_ENV: cs-pr
on:
  pull_request:
    branches:
      - main
    paths:
      - 'dev-infrastructure/**/*.bicep'
      - 'dev-infrastructure/**/*.bicepparam'
      - 'dev-infrastructure/Makefile'
      - '.github/workflows/cs-pr-bicep-what-if.yml'

jobs:
  what-if:
    permissions:
      id-token: 'write'
      contents: 'read'
    runs-on: 'ubuntu-latest'
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
          fetch-depth: 1

      - name: 'Az CLI login'
        uses: azure/login@6c251865b4e6290e7b78be643ea2d005bc51f69a # v2.1.1
        with:
            client-id: ${{ secrets.AZURE_CLIENT_ID }}
            tenant-id: ${{ secrets.AZURE_TENANT_ID }}
            subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}

      - name: "install azure-cli"
        uses: "Azure/ARO-HCP@main"

      - name: 'Deployment What If'
        run: |
          cd dev-infrastructure/
          make what-if