updated workflow

Author: jeffreyaven

.github/workflows/stackql.yml

@@ -127,8 +127,8 @@ jobs:
           test_query_file_path: './stackql/scripts/run-compliance-checks/run-compliance-checks.iql'
           expected_rows: 0
 
-      - name: "[CLEANUP] terraform destroy"
+      - name: "[CLEANUP] delete instances and bucket using stackql-exec"
         if: failure()
-        env:
-          TF_VAR_google_credentials: ${{ secrets.GOOGLE_CREDENTIALS }}
-        run: cd terraform; terraform destroy -auto-approve
+        uses: stackql/stackql-exec@v1.3.1
+        with:
+          query_file_path: './stackql/scripts/terraform-cleanup/terraform-cleanup.iql'

stackql/scripts/check-terraform-instances/check-terraform-instances.iql

@@ -1,7 +1,7 @@
 <<<jsonnet
 {
     project: 'stackql-demo-2',
-    zone: 'australia-southeast1-b',
+    zone: 'australia-southeast1-c',
     nameLike: 'terraform-',
 }
 >>>

stackql/scripts/terraform-cleanup/terraform-cleanup.iql

@@ -0,0 +1,19 @@
+DELETE FROM google.compute.instances
+WHERE project = 'stackql-demo-2'
+AND zone = 'australia-southeast1-c'
+AND instance = 'terraform-test-1';
+
+DELETE FROM google.compute.instances
+WHERE project = 'stackql-demo-2'
+AND zone = 'australia-southeast1-c'
+AND instance = 'terraform-test-2';
+
+DELETE FROM google.compute.instances
+WHERE project = 'stackql-demo-2'
+AND zone = 'australia-southeast1-c'
+AND instance = 'terraform-test-3';
+
+DELETE FROM google.storage.buckets
+WHERE bucket = 'stackql-demo-public-access-not-enforced';
+
+