tf-github-secmgr

Warning

This module is deprecated and this repository will be archived.

The github_organization_security_manager resource that this module wraps is deprecated in the GitHub provider as of v6.13.0, with the upstream message:

This resource is deprecated in favor of the github_organization_role_team resource.

GitHub replaced the standalone security-manager concept with organization roles. The security_manager role is now one of several built-in organization roles.

Functionality has moved to tf-github-teams v0.2.0 or later, which grants the role via github_organization_role_team, resolving the role ID through the github_organization_roles data source.

Overview

A Terraform Module for GitHub Security Manager.

The Terraform Module documentation contains the available variables and outputs.

Migration

The old github_organization_security_manager resource and the new github_organization_role_team resource issue the identical underlying API call — AssignOrgRoleToTeam, an idempotent PUT. Migrating is therefore a state-only operation:

1. Forget the old resource with a removed block:

   removed {
     from = module.github-secmgr
   
     lifecycle {
       destroy = false # forget only; never revoke the live grant
     }
   }

2. Let the new github_organization_role_team resource in tf-github-teams create. Because the underlying API call is idempotent, this re-asserts a grant that is already correct.

The grant is never revoked and there is no access interruption. No import is required.