feat: have prevent non git deploys settable on the build resource

Author: Sean Roberts

examples/resources/netlify_site_build_settings/resource.tf

@@ -1,7 +1,8 @@
 resource "netlify_site_build_settings" "blog" {
-  site_id                = data.netlify_site.blog.id
-  build_command          = "npm run build"
-  publish_directory      = "dist"
-  production_branch      = "main"
-  branch_deploy_branches = ["preview", "staging"]
+  site_id                     = data.netlify_site.blog.id
+  build_command               = "npm run build"
+  publish_directory           = "dist"
+  production_branch           = "main"
+  branch_deploy_branches      = ["preview", "staging"]
+  prevent_non_git_prod_deploys = true
 }

internal/provider/site_build_settings_resource.go

@@ -50,6 +50,7 @@ type siteBuildSettingsResourceModel struct {
 	BranchDeployAllBranches types.Bool     `tfsdk:"branch_deploy_all_branches"`
 	BranchDeployBranches    []types.String `tfsdk:"branch_deploy_branches"`
 	DeployPreviews          types.Bool     `tfsdk:"deploy_previews"`
+	PreventNonGitProdDeploys types.Bool    `tfsdk:"prevent_non_git_prod_deploys"`
 
 	BuildImage types.String `tfsdk:"build_image"`
 	// NodeJSVersion types.String `tfsdk:"node_js_version"` // versions.node.active / default: versions.node.active or versions.node.default
@@ -152,6 +153,12 @@ func (r *siteBuildSettingsResource) Schema(_ context.Context, _ resource.SchemaR
 				Computed: true,
 				Default:  booldefault.StaticBool(true),
 			},
+			"prevent_non_git_prod_deploys": schema.BoolAttribute{
+				Optional:    true,
+				Computed:    true,
+				Default:     booldefault.StaticBool(false),
+				Description: "When enabled, prevents production deploys from sources other than the linked git repository.",
+			},
 			"build_image": schema.StringAttribute{
 				Optional: true,
 				Computed: true,
@@ -288,6 +295,7 @@ func (r *siteBuildSettingsResource) read(ctx context.Context, state *siteBuildSe
 	} else {
 		state.DeployPreviews = types.BoolValue(!*site.BuildSettings.SkipPrs)
 	}
+	state.PreventNonGitProdDeploys = types.BoolPointerValue(site.PreventNonGitProdDeploys)
 	state.BuildImage = types.StringValue(site.BuildImage)
 	state.FunctionsRegion = types.StringPointerValue(site.FunctionsRegion)
 	state.PrettyURLs = types.BoolPointerValue(site.ProcessingSettings.Html.PrettyUrls)
@@ -340,6 +348,7 @@ func (r *siteBuildSettingsResource) write(ctx context.Context, plan *siteBuildSe
 				PrettyUrls: plan.PrettyURLs.ValueBoolPointer(),
 			},
 		},
+		PreventNonGitProdDeploys: plan.PreventNonGitProdDeploys.ValueBoolPointer(),
 	}
 
 	if plan.BuildImage.IsUnknown() {