cs-pr-what-if.yml

---
name: CS PR Check Environment Bicep What-If
env:
  DEPLOY_ENV: cs-pr
on:
  pull_request:
    branches:
      - main
    paths:
      - 'dev-infrastructure/**/*.bicep'
      - 'dev-infrastructure/**/*.bicepparam'
      - 'dev-infrastructure/Makefile'
      - '.github/workflows/cs-pr-bicep-what-if.yml'

jobs:
  what-if:
    permissions:
      id-token: 'write'
      contents: 'read'
    runs-on: 'ubuntu-latest'
    steps:
      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
        with:
          fetch-depth: 1

      - name: 'Az CLI login'
        uses: azure/login@6c251865b4e6290e7b78be643ea2d005bc51f69a # v2.1.1
        with:
            client-id: ${{ secrets.AZURE_CLIENT_ID }}
            tenant-id: ${{ secrets.AZURE_TENANT_ID }}
            subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}

      - name: Install Azure CLI
        uses: ./.github/actions/install-azure-cli

      - name: 'Deployment What If'
        run: |
          dev-infrastructure/make ${DEPLOY_ENV} what-if