feat: add forge code for OSS (#1)

Author: edersonbrilhante

.gitignore

@@ -0,0 +1,32 @@
+.DS_Store
+.bash_history
+
+# Ignore Terraform state files
+*.tfstate
+*.tfstate.backup
+*.tfstate.backup.*
+
+# Ignore override files
+override.tf
+override.tf.json
+*_override.tf
+*_override.tf.json
+
+# Ignore Terraform plan files
+*.tfplan
+
+# Ignore .terraform directory
+.terraform/
+
+# Ignore Terraform state and lock files
+*.tflock
+.terraform.lock.hcl
+.terragrunt-cache
+providers
+
+# Auth files. Sensitive.
+.auth/
+
+artifacts
+
+package

.pre-commit-config.yaml

@@ -0,0 +1,148 @@
+---
+repos:
+  # General Hooks
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v5.0.0
+    hooks:
+      - id: check-yaml
+        always_run: true
+      - id: end-of-file-fixer
+        always_run: true
+      - id: trailing-whitespace
+        always_run: true
+        args: [--markdown-linebreak-ext=md]
+      - id: check-merge-conflict
+        always_run: true
+      - id: check-added-large-files
+        always_run: true
+        exclude: (images/*)
+      - id: check-ast
+        always_run: true
+      - id: check-builtin-literals
+        always_run: true
+      - id: check-json
+        always_run: true
+      - id: check-toml
+        always_run: true
+      - id: check-xml
+        always_run: true
+      - id: detect-private-key
+        always_run: true
+      - id: mixed-line-ending
+        always_run: true
+      - id: debug-statements
+        always_run: true
+      - id: fix-encoding-pragma
+        always_run: true
+      - id: name-tests-test
+        always_run: true
+      - id: destroyed-symlinks
+        always_run: true
+      - id: check-docstring-first
+        always_run: true
+      - id: check-case-conflict
+        always_run: true
+      - id: double-quote-string-fixer
+        always_run: true
+
+  - repo: https://github.com/jumanjihouse/pre-commit-hook-yamlfmt
+    rev: 0.2.3
+    hooks:
+      - id: yamlfmt
+        always_run: true
+        args: [--mapping, '2', --sequence, '4', --offset, '2', --width, '180']
+        exclude: (ansible/)
+
+  - repo: http://github.com/jumanjihouse/pre-commit-hooks
+    rev: 3.0.0
+    hooks:
+      - id: shellcheck
+      - id: shfmt
+        args: [-i, '4', -w]
+      - id: script-must-have-extension
+
+  - repo: https://github.com/adrienverge/yamllint
+    rev: v1.37.0
+    hooks:
+      - id: yamllint
+
+  - repo: https://github.com/hadolint/hadolint
+    rev: v2.13.1-beta
+    hooks:
+      - id: hadolint
+
+  # Python Hooks
+  - repo: https://github.com/hhatto/autopep8
+    rev: v2.3.2
+    hooks:
+      - id: autopep8
+
+  - repo: https://github.com/PyCQA/isort
+    rev: 6.0.1
+    hooks:
+      - id: isort
+
+  - repo: https://github.com/PyCQA/autoflake
+    rev: v2.3.1
+    hooks:
+      - id: autoflake
+
+  - repo: https://github.com/PyCQA/flake8
+    rev: 7.2.0
+    hooks:
+      - id: flake8
+        args:
+          - --ignore=E501
+
+  # JSON Schema Hooks
+  - repo: https://github.com/python-jsonschema/check-jsonschema
+    rev: 0.33.0
+    hooks:
+      - id: check-github-workflows
+      - id: check-github-actions
+        args: [--verbose]
+      - id: check-renovate
+
+  # Terraform Hooks
+  - repo: https://github.com/gruntwork-io/pre-commit
+    rev: v0.1.29
+    hooks:
+      - id: terragrunt-hclfmt
+
+  - repo: https://github.com/antonbabenko/pre-commit-terraform
+    rev: v1.99.0
+    hooks:
+      - id: terraform_fmt
+        args:
+          - --hook-config=--tf-path=tofu
+        always_run: true
+      - id: terraform_tflint
+        args:
+          - --hook-config=--tf-path=tofu
+        exclude: (modules/infra-modules/splunk_cloud_data_manager)
+        always_run: true
+      - id: terraform_validate
+        args:
+          - --hook-config=--retry-once-with-cleanup=true
+          - --tf-init-args=-backend=false
+          - --hook-config=--tf-path=tofu
+        exclude: (modules/infra-modules/splunk_cloud_data_manager)
+        always_run: true
+      - id: terraform_docs
+        always_run: true
+        args:
+          - --hook-config=--tf-path=tofu
+          - --args=--config=.terraform-docs.yml
+        exclude: (modules/infra-modules/splunk_cloud_data_manager)
+
+  # Security Hooks
+  - repo: https://github.com/gitleaks/gitleaks
+    rev: v8.25.1
+    hooks:
+      - id: gitleaks
+        always_run: true
+
+  - repo: https://github.com/python-poetry/poetry
+    rev: 2.1.2
+    hooks:
+      - id: poetry-check

.terraform-docs.yml

@@ -0,0 +1,47 @@
+---
+formatter: markdown   # this is required
+
+version: ''
+
+header-from: main.tf
+footer-from: ''
+
+recursive:
+  enabled: false
+
+sections:
+  hide: []
+  show: []
+
+content: ''
+
+output:
+  file: README.md
+  mode: inject
+  template: |-
+    <!-- BEGIN_TF_DOCS -->
+    {{ .Content }}
+    <!-- END_TF_DOCS -->
+
+output-values:
+  enabled: false
+  from: ''
+
+sort:
+  enabled: true
+  by: name
+
+settings:
+  anchor: true
+  color: true
+  default: true
+  description: false
+  escape: true
+  hide-empty: false
+  html: true
+  indent: 2
+  lockfile: true
+  read-comments: true
+  required: true
+  sensitive: true
+  type: true

.yamllint

@@ -0,0 +1,42 @@
+---
+
+# Specify the files to lint
+yaml-files:
+  - '*.yaml'
+  - '*.yml'
+  - .yamllint
+
+# Define the linting rules
+rules:
+  braces: enable
+  brackets: enable
+  colons: enable
+  commas: enable
+  comments:
+    level: error
+  comments-indentation:
+    level: error
+  document-end: disable
+  document-start:
+    present: true  # Ensure that documents start with '---'
+    level: error  # Set the level to error
+  empty-lines: enable
+  empty-values: disable
+  hyphens: enable
+  indentation:
+    spaces: 2  # Use 2 spaces for indentation
+    level: error  # Set the level to error
+    indent-sequences: true
+    check-multi-line-strings: false
+  key-duplicates: enable
+  key-ordering: disable
+  # Unavoidable due to long queries.
+  line-length: disable
+  new-line-at-end-of-file: enable
+  new-lines: enable
+  octal-values: disable
+  quoted-strings: disable
+  trailing-spaces:
+    level: error  # Warn about trailing spaces
+  truthy:
+    level: error

CODE_OF_CONDUCT.md

@@ -0,0 +1,79 @@
+
+# Contributor Covenant Code of Conduct
+
+## Our Pledge
+
+In the interest of fostering an open and welcoming environment, we as
+contributors and maintainers pledge to make participation in our project and
+our community a harassment-free experience for everyone, regardless of age, body
+size, disability, ethnicity, sex characteristics, gender identity and expression,
+level of experience, education, socio-economic status, nationality, personal
+appearance, race, religion, or sexual identity and orientation.
+
+## Our Standards
+
+Examples of behavior that contributes to creating a positive environment
+include:
+
+- Using welcoming and inclusive language
+- Being respectful of differing viewpoints and experiences
+- Gracefully accepting constructive criticism
+- Focusing on what is best for the community
+- Showing empathy towards other community members
+
+Examples of unacceptable behavior by participants include:
+
+- The use of sexualized language or imagery and unwelcome sexual attention or
+  advances
+- Trolling, insulting/derogatory comments, and personal or political attacks
+- Public or private harassment
+- Publishing others' private information, such as a physical or electronic
+  address, without explicit permission
+- Other conduct which could reasonably be considered inappropriate in a
+  professional setting
+
+## Our Responsibilities
+
+Project maintainers are responsible for clarifying the standards of acceptable
+behavior and are expected to take appropriate and fair corrective action in
+response to any instances of unacceptable behavior.
+
+Project maintainers have the right and responsibility to remove, edit, or
+reject comments, commits, code, wiki edits, issues, and other contributions
+that are not aligned to this Code of Conduct, or to ban temporarily or
+permanently any contributor for other behaviors that they deem inappropriate,
+threatening, offensive, or harmful.
+
+## Scope
+
+This Code of Conduct applies within all project spaces, and it also applies when
+an individual is representing the project or its community in public spaces.
+Examples of representing a project or community include using an official
+project e-mail address, posting via an official social media account, or acting
+as an appointed representative at an online or offline event. Representation of
+a project may be further defined and clarified by project maintainers.
+
+## Enforcement
+
+Instances of abusive, harassing, or otherwise unacceptable behavior may be
+reported by contacting the project team at [oss-conduct@cisco.com][conduct-email]. All
+complaints will be reviewed and investigated and will result in a response that
+is deemed necessary and appropriate to the circumstances. The project team is
+obligated to maintain confidentiality with regard to the reporter of an incident.
+Further details of specific enforcement policies may be posted separately.
+
+Project maintainers who do not follow or enforce the Code of Conduct in good
+faith may face temporary or permanent repercussions as determined by other
+members of the project's leadership.
+
+[conduct-email]: mailto:oss-conduct@cisco.com
+
+## Attribution
+
+This Code of Conduct is adapted from the [Contributor Covenant][homepage], version 1.4,
+available at https://www.contributor-covenant.org/version/1/4/code-of-conduct.html
+
+[homepage]: https://www.contributor-covenant.org
+
+For answers to common questions about this code of conduct, see
+https://www.contributor-covenant.org/faq