From 4d3c43e0ef606e99caf97465d66814771b89add9 Mon Sep 17 00:00:00 2001
From: j4y <36337+j4y@users.noreply.github.com>
Date: Sun, 31 May 2026 10:14:09 -0400
Subject: [PATCH] chore(terragrunt): disable live lockfile generation with
 readonly init flag

---
 terragrunt/live/website/terragrunt.hcl | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/terragrunt/live/website/terragrunt.hcl b/terragrunt/live/website/terragrunt.hcl
index 8e36c41..451596c 100644
--- a/terragrunt/live/website/terragrunt.hcl
+++ b/terragrunt/live/website/terragrunt.hcl
@@ -3,6 +3,15 @@ include "root" {
 }
 
 terraform {
+  # Prevent OpenTofu/Terraform from generating a .terraform.lock.hcl file
+  # inside the live Terragrunt directory. Live folders do not own provider
+  # versions — the module lockfile in terraform/website/ is the single
+  # source of truth. Without this flag, `terragrunt init` would create a
+  # local lockfile here, causing CI to detect uncommitted changes.
+  extra_arguments "disable_lockfile" {
+    commands = ["init"]
+    arguments = ["-lockfile=readonly"]
+  }
   source = "../../../terraform/website/"
 }