feat: Terraform compliance tool added (#3)

* feat: added terraform-compliance to image

* fix: removed white space

* fix: removed permission line

* fix: updated readme

* fix: updated docker image, resolved vulnerability.

Co-authored-by: nabil.aziz <[email protected]>

Dockerfile

@@ -1,4 +1,4 @@
-FROM summerwind/actions-runner:v2.291.1-ubuntu-20.04-3ca1152
+FROM summerwind/actions-runner:v2.295.0-ubuntu-20.04-3724b46
 
 USER root
 WORKDIR /usr/workspace
@@ -56,4 +56,8 @@ RUN curl -LO https://dl.k8s.io/release/v${KUBECTL_VERSION}/bin/linux/amd64/kubec
     mv ./kubectl /usr/local/bin && \
     kubectl version --client
 
+ENV TERRAFORM_COMPLIANCE_VERSION="1.3.33"
+RUN pip install terraform-compliance==v${TERRAFORM_COMPLIANCE_VERSION} && \
+    terraform-compliance --version
+
 USER runner

README.md

@@ -9,6 +9,7 @@ The intended purpose of this image is for it to be used as a Github runner with
 - The [Azure CLI](https://packages.microsoft.com/repos/azure-cli/)
 - Version [1.18.X](https://dl.google.com/go/go1.18.src.tar.gz) of the Go programming language
 - Version [1.2.5](https://releases.hashicorp.com/terraform/1.2.5/) of infrastructure as code tool Terraform
+- Version [1.3.33](https://terraform-compliance.com/) of a security and compliance focused test framework tool against terraform 
 - Version [0.38.X](https://github.com/gruntwork-io/terragrunt/releases/download/v0.38.4/terragrunt_linux_amd64) of Terraform wrapper Terragrunt 
 - Version [0.10.X](https://github.com/loft-sh/vcluster/releases/download/v0.10.2/vcluster-linux-amd64) of vcluster, a tool for creating virtual Kubernetes clusters
 - Version [1.24.X](https://storage.googleapis.com/kubernetes-release/release/v1.24.0/bin/linux/amd64/kubectl) of kubectl, a command-line tool that allows you to run commands against Kubernetes clusters