added tf cleanup

Author: jeffreyaven

.github/workflows/stackql.yml

@@ -126,3 +126,9 @@ jobs:
         with:
           test_query_file_path: './stackql/scripts/run-compliance-checks/run-compliance-checks.iql'
           expected_rows: 0
+
+      - name: "[CLEANUP] terraform destroy"
+        if: failure()
+        env:
+          TF_VAR_google_credentials: ${{ secrets.GOOGLE_CREDENTIALS }}
+        run: cd terraform; terraform destroy -auto-approve

stackql/scripts/run-compliance-checks/run-compliance-checks.iql

@@ -1 +1,5 @@
-SELECT 1
+SELECT name
+, JSON_EXTRACT(iamConfiguration, '$.publicAccessPrevention') as publicAccessPrevention 
+FROM google.storage.buckets 
+WHERE project = 'stackql-demo-2' 
+AND publicAccessPrevention = 'inherited';