
module "scorecard_rule_github_secrets" {
  source = "git@github.com:theorchard/terraform-lambda.git//?ref=5.3.0"

  environment                                    = var.environment
  lambda_name                                    = "${var.service_name}-scorecard-github-secrets"
  application_family                             = var.application_family
  lambda_description                             = "Scorecard Rule: GitHub Secrets"
  use_container_image                            = true
  datadog_advanced_enabled                       = true
  vpc_enabled                                    = true
  splitio_enabled                                = false
  vpc_id                                         = module.vpc_info.vpc_id
  vpc_subnet_ids                                 = module.vpc_info.default_private_subnet_ids
  lambda_function_timeout                        = 300
  lambda_function_reserved_concurrent_executions = 1
  cloudwatch_event_enabled                       = true
  cloudwatch_event_schedule                      = "rate(1 hour)"

  lambda_function_environment_variables = {
    Environment          = var.environment
    DD_SCORECARD_RULE_ID = var.scorecard_rule_id_github_secrets
    SENTRY_DSN           = module.sentry_project.sentry_key_dsn_public_output
  }
}

module "scorecard_rule_github_secrets_datadog" {
  source = "git@github.com:theorchard/terraform-datadog.git//modules/lambda?ref=6.18.2"

  environment                           = var.environment
  service_name                          = "${var.service_name}-scorecard-github-secrets"
  lambda_invocation_monitor_enabled     = true
  lambda_error_monitor_enabled          = true
  lambda_error_ok_number                = 0
  lambda_error_warning_recovery_number  = null
  lambda_error_critical_recovery_number = null
  lambda_error_warning_number           = null
  lambda_error_critical_number          = 1
  notification_endpoints                = "@slack-devops-internal-alerts"
  escalation_notification_endpoints     = "@slack-devops-internal-alerts"
}
