refactor: Use one workflow for PRs and pushes

Author: unfunco

.github/workflows/ci.yaml

@@ -1,6 +1,16 @@
 name: CI
 
 on:
+  pull_request:
+    branches:
+    - main
+    paths-ignore:
+    - .editorconfig
+    - .gitignore
+    - CHANGELOG.md
+    - LICENSE.md
+    - Makefile
+    - README.md
   push:
     branches:
     - main
@@ -29,9 +39,12 @@ jobs:
       run: terraform fmt -check -recursive
     - name: Validate the configuration
       run: terraform validate
+    - name: Run unit tests
+      run: terraform test
 
   release:
     name: Release?
+    if: github.event == 'push'
     needs: [ verify ]
     permissions:
       contents: write

.github/workflows/pr.yaml

@@ -12,9 +12,9 @@ without requiring AWS credentials to be stored as long-lived GitHub secrets.
 
 ### Requirements
 
-- [AWS Provider] 4.0+
-- [TLS Provider] 3.0+
-- [Terraform] 1.0+
+- [AWS Provider] 5.0+
+- [TLS Provider] 4.0+
+- [Terraform] 1.10+
 
 ### Installation and usage
 

README.md

@@ -0,0 +1,16 @@
+provider "aws" {
+  region = "eu-west-1"
+}
+
+run "single_github_repository_no_branch_specified" {
+  variables {
+    github_repositories = ["unfunco/terraform-aws-oidc-github"]
+  }
+
+  command = plan
+
+  assert {
+    condition     = aws_s3_bucket.bucket.bucket == "test-bucket"
+    error_message = "S3 bucket name did not match expected"
+  }
+}