more test workflaow

.github/workflows/environment-main-deploy.yaml

@@ -0,0 +1,41 @@
+name: Environment Main - Apply
+
+on:
+  push:
+    branches:
+    - main
+
+permissions:
+  id-token: write
+  contents: read
+  pull-requests: write
+
+jobs:
+  envtest:
+    name: Environment Main - Apply
+    runs-on: ubuntu-latest
+    environment: main
+    env:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+    steps:
+    - name: Checkout code
+      uses: actions/checkout@9a9194f87191a7e9055e3e9b95b8cfb13023bb08
+    - name: Configure AWS Access
+      uses: aws-actions/configure-aws-credentials@67fbcbb121271f7775d2e7715933280b06314838
+      with:
+        role-to-assume: arn:aws:iam::${{ vars.AWS_ACCOUNT }}:role/GitHubAction-Wildsea@${{ vars.ENVIRONMENT }}
+        role-session-name: GitHubTest
+        aws-region: ${{ vars.AWS_REGION }}
+    - name: terraform plan
+      uses: dflook/terraform-apply
+      with:
+        path: terraform/environment/github
+        variables: |
+          aws_account="${{ vars.AWS_ACCOUNT }}"
+          aws_region="${{ vars.AWS_REGION }}"
+          state_bucket="${{ vars.STATE_BUCKET }}"
+          environment="${{ vars.ENVIRONMENT }}"
+        backend_config:
+          bucket=${{ vars.STATE_BUCKET }}
+          key=${{ vars.ENVIRONMENT }}/terraform.tfstate
+          region=${{ vars.AWS_REGION }}

.github/workflows/environment-main-plan.yaml

@@ -2,9 +2,6 @@ name: Environment Main - Plan
 
 on:
   pull_request: {}
-  push:
-    branches:
-    - main
 
 permissions:
   id-token: write