From fb448d2b92e233a8997ef4e0f9e4c878a259fa6a Mon Sep 17 00:00:00 2001
From: John Ko <279736+johnko@users.noreply.github.com>
Date: Sun, 16 Nov 2025 11:28:17 -0500
Subject: [PATCH 1/4] Add .github/CODEOWNERS

---
 .github/CODEOWNERS | 7 +++++++
 1 file changed, 7 insertions(+)
 create mode 100644 .github/CODEOWNERS

diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
new file mode 100644
index 0000000..2b78a90
--- /dev/null
+++ b/.github/CODEOWNERS
@@ -0,0 +1,7 @@
+# https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners#example-of-a-codeowners-file
+# This is a comment.
+# Each line is a file pattern followed by one or more owners.
+
+# These owners will be the default owners for everything in
+# the repo.
+* @johnko

From 4d149bbf3ce7dc745cc4974db87dbcdaf0a839ee Mon Sep 17 00:00:00 2001
From: John Ko <279736+johnko@users.noreply.github.com>
Date: Sun, 16 Nov 2025 11:28:33 -0500
Subject: [PATCH 2/4] Add .github/tf.sh

---
 .github/tf.sh | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/.github/tf.sh b/.github/tf.sh
index c2a95ce..801a386 100644
--- a/.github/tf.sh
+++ b/.github/tf.sh
@@ -1,8 +1,16 @@
 #!/usr/bin/env bash
 set -eo pipefail
 
+if [[ -e .envrc ]]; then
+  set +x
+  # hide secret env values from output
+  source .envrc
+fi
+
 if [[ -z $IAC_BIN ]]; then
+  set -x
   export IAC_BIN=terraform
+  set +x
 fi
 
 WORKSPACE="$1"
@@ -29,7 +37,6 @@ case $SAFE_ACTION in
     echo "ACTION=$ACTION"
     ;;
   *)
-    set +x
     echo "ERROR: invalid 'ACTION', received '$ACTION'"
     exit 1
     ;;

From 302f49e1a5581d102cc3b292f91e2a74fa354fee Mon Sep 17 00:00:00 2001
From: John Ko <279736+johnko@users.noreply.github.com>
Date: Sun, 16 Nov 2025 11:33:17 -0500
Subject: [PATCH 3/4] Add .github/CODEOWNERS


From dbe6c3879da633fba0c587911b1838de17e4d713 Mon Sep 17 00:00:00 2001
From: John Ko <279736+johnko@users.noreply.github.com>
Date: Sun, 16 Nov 2025 11:33:21 -0500
Subject: [PATCH 4/4] Add .github/tf.sh

---
 .github/tf.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/tf.sh b/.github/tf.sh
index 801a386..cdc537f 100644
--- a/.github/tf.sh
+++ b/.github/tf.sh
@@ -4,6 +4,7 @@ set -eo pipefail
 if [[ -e .envrc ]]; then
   set +x
   # hide secret env values from output
+  # shellcheck disable=SC1091
   source .envrc
 fi