Define schema for repository_property

Author: Moser-ss

examples/github_organization_ruleset/main.tf

@@ -0,0 +1,61 @@
+resource "github_organization_ruleset" "protect_branch" {
+  enforcement = "active"
+  name        = "Protect Master Branch (Beta)"
+  target      = "branch"
+  conditions {
+    repository_property {
+      exclude = []
+      include = [
+        {
+          name  = "visibility"
+          value = "public"
+        }
+      ]
+    }
+    ref_name {
+      exclude = []
+      include = [
+        "~DEFAULT_BRANCH",
+      ]
+    }
+  }
+  rules {
+    creation                = false
+    deletion                = true
+    non_fast_forward        = true
+    required_linear_history = false
+    required_signatures     = false
+    update                  = false
+
+    pull_request {
+      dismiss_stale_reviews_on_push     = true
+      require_code_owner_review         = true
+      require_last_push_approval        = true
+      required_approving_review_count   = 1
+      required_review_thread_resolution = false
+    }
+
+    required_status_checks {
+      strict_required_status_checks_policy = false
+
+      required_check {
+        context        = "SonarQube Code Analysis"
+        integration_id = 0
+      }
+    }
+
+    required_workflows {
+      required_workflow {
+        repository_id = "442515790"
+        path          = ".github/workflows/trivy-scan-pr-commit.yml"
+        ref           = "refs/heads/master"
+      }
+      required_workflow {
+        repository_id = "442515790"
+        path          = ".github/workflows/required_neodora.yml"
+        ref           = "refs/heads/master"
+      }
+    }
+
+  }
+}

github/resource_github_organization_ruleset.go

@@ -112,20 +112,41 @@ func resourceGithubOrganizationRuleset() *schema.Resource {
 								},
 							},
 						},
-						"repository_name": {
+						"repository_property": {
 							Type:         schema.TypeList,
 							Optional:     true,
 							MaxItems:     1,
 							ExactlyOneOf: []string{"conditions.0.repository_id"},
 							AtLeastOneOf: []string{"conditions.0.repository_id"},
+							Description:  "Conditions to target repositories by property ",
 							Elem: &schema.Resource{
 								Schema: map[string]*schema.Schema{
 									"include": {
 										Type:        schema.TypeList,
 										Required:    true,
 										Description: "Array of repository names or patterns to include. One of these patterns must match for the condition to pass. Also accepts `~ALL` to include all repositories.",
-										Elem: &schema.Schema{
-											Type: schema.TypeString,
+										Elem: &schema.Resource{
+											Schema: map[string]*schema.Schema{
+
+												"name": {
+													Type:        schema.TypeString,
+													Required:    true,
+													Description: "The name of the repository property to target",
+												},
+												"property_values": {
+													Type:        schema.TypeList,
+													Required:    true,
+													Description: "The values to match for the repository property.",
+													Elem: &schema.Schema{
+														Type: schema.TypeString,
+													},
+												},
+												"source": {
+													Type:        schema.TypeString,
+													Description: "The source of the repository property. Defaults to 'custom' if not specified.Can be one of: custom, system",
+													Default:     "custom",
+												},
+											},
 										},
 									},
 									"exclude": {
@@ -136,11 +157,35 @@ func resourceGithubOrganizationRuleset() *schema.Resource {
 											Type: schema.TypeString,
 										},
 									},
-									"protected": {
-										Type:        schema.TypeBool,
-										Optional:    true,
-										Default:     false,
-										Description: "Whether renaming of target repositories is prevented.",
+								},
+							},
+						},
+						"repository_name": {
+							Type:         schema.TypeList,
+							Optional:     true,
+							MaxItems:     1,
+							ExactlyOneOf: []string{"conditions.0.repository_id"},
+							AtLeastOneOf: []string{"conditions.0.repository_id"},
+							Elem: &schema.Resource{
+								Schema: map[string]*schema.Schema{
+
+									"name": {
+										Type:        schema.TypeString,
+										Required:    true,
+										Description: "The name of the repository property to target",
+									},
+									"property_values": {
+										Type:        schema.TypeList,
+										Required:    true,
+										Description: "The values to match for the repository property.",
+										Elem: &schema.Schema{
+											Type: schema.TypeString,
+										},
+									},
+									"source": {
+										Type:        schema.TypeString,
+										Description: "The source of the repository property. Defaults to 'custom' if not specified.Can be one of: custom, system",
+										Default:     "custom",
 									},
 								},
 							},

github/respository_rules_utils.go

@@ -146,6 +146,8 @@ func expandConditions(input []interface{}, org bool) *github.RulesetConditions {
 			}
 
 			rulesetConditions.RepositoryID = &github.RulesetRepositoryIDsConditionParameters{RepositoryIDs: repositoryIDs}
+		} else if v, ok := inputConditions["repository_property"].([]interface{}); ok && v != nil && len(v) != 0 {
+			rulesetConditions.
 		}
 	}