Bump github.com/open-policy-agent/opa from 1.13.2 to 1.14.0 in /lambda #221

	name: Go
	on:
	pull_request:
	types:
	- opened
	- reopened
	- synchronize
	branches:
	- main

	jobs:
	golang:
	runs-on: ubuntu-24.04

	steps:
	- name: Checkout
	id: checkout
	uses: actions/checkout@v6

	- name: Setup Go
	id: setup
	uses: actions/setup-go@v6
	with:
	go-version-file: 'lambda/go.mod'

	- name: Install dependencies
	id: deps
	working-directory: lambda
	run: go get .

	- name: Build
	id: build
	working-directory: lambda
	run: GOARCH=$([ "$RUNNER_ARCH" = "ARM64" ] && echo "arm64" \|\| echo "amd64") go build -tags lambda.norpc -o bootstrap main.go
	env:
	GOOS: linux

	- name: Go test
	id: test
	working-directory: lambda
	run: go test ./... -cover

	terraform:
	runs-on: ubuntu-24.04

	steps:
	- name: Checkout
	id: checkout
	uses: actions/checkout@v6

	- name: Setup Terraform
	id: setup
	uses: hashicorp/setup-terraform@v4

	- name: Terraform Format
	id: format
	run: terraform fmt -check

	- name: Terraform Init
	id: init
	run: terraform init

	- name: Terraform Validate
	id: validate
	run: terraform validate

	- name: Trivy Scan Config
	id: trivy-config
	uses: aquasecurity/trivy-action@0.34.1
	with:
	scan-type: 'config'
	scan-ref: '.'

	- name: Trivy Scan Filesystem
	id: trivy-fs
	uses: aquasecurity/trivy-action@0.34.1
	with:
	scan-type: 'fs'
	scan-ref: '.'
	skip-setup-trivy: true

	- name: Setup TFLint
	id: tflint-setup
	uses: terraform-linters/setup-tflint@v6.2.1
	with:
	tflint_version: 'latest'

	- name: Init TFLint
	id: tflint-init
	run: tflint --init
	env:
	GITHUB_TOKEN: ${{ github.token }}

	- name: Run TFLint
	id: tflint
	run: tflint -f compact

Provide feedback