adding config + pipeline #7

	name: Rule Sets Pipeline

	on:
	pull_request:
	branches:
	- rule-sets-DTSPO-17918
	push:
	branches:
	- rule-sets-DTSPO-17918

	permissions:
	id-token: write
	contents: read

	jobs:
	precheck-sbox:
	runs-on: ubuntu-latest
	timeout-minutes: 60
	steps:
	- name: Checkout code
	uses: actions/checkout@v2

	- name: Log in to Azure
	run: \|
	az login --service-principal -u ${{ secrets.AZURE_CLIENT_ID }} -p ${{ secrets.AZURE_CLIENT_SECRET }} --tenant ${{ secrets.AZURE_TENANT_ID }}
	az account set --subscription ${{ secrets.DCD_CFT_SANDBOX_SUBSCRIPTION }}

	- name: Use Terraform
	uses: hashicorp/setup-terraform@v1

	- name: Change directory to Terraform config
	run: cd components

	- name: Precheck Terraform
	working-directory: components
	env:
	AZURE_SUBSCRIPTION_ID: ${{ secrets.DCD_CFT_SANDBOX_SUBSCRIPTION }}
	GITHUB_TOKEN: ${{ secrets.PAT_TOKEN }}
	run: \|
	terraform init \
	-backend-config="subscription_id=${{ secrets.DCD_CFT_SANDBOX_SUBSCRIPTION }}"
	terraform plan \
	-var="location=UK South" \
	-var="override_action=plan" \
	-var="github_token=${{ secrets.PAT_TOKEN }}"


	- name: Plan Terraform
	working-directory: components
	env:
	ARM_CLIENT_ID: ${{ secrets.AZURE_CLIENT_ID }}
	ARM_CLIENT_SECRET: ${{ secrets.AZURE_CLIENT_SECRET }}
	ARM_SUBSCRIPTION_ID: ${{ secrets.DCD_CFT_SANDBOX_SUBSCRIPTION }}
	ARM_TENANT_ID: ${{ secrets.AZURE_TENANT_ID }}
	GITHUB_TOKEN: ${{ secrets.PAT_TOKEN }}
	run: \|
	terraform plan \
	-var="location=UK South" \
	-var="override_action=plan" \
	-var="github_token=${{ secrets.PAT_TOKEN }}"

Provide feedback