[BUG]: Fails to create github_repository fork with Github Advanced Security and Secret scanning enabled

[jrbeilke]

Expected Behavior

Attempting to create a new github_repository as a fork with Github Advanced Security and Secret scanning enabled

Actual Behavior

Attempted to create a new github_repository as a fork, but the apply failed with an error related to Github Advanced Security and Secret scanning

Error:

Error: PATCH https://api.github.com/repos/jrbeilke/test-fork: 422 Secret scanning can only be enabled on repos where Advanced Security is enabled. []
with module.github_repos["test-fork"].github_repository.fork_repo
on ../modules/fork_repo/main.tf line 10, in resource "github_repository" "fork_repo":
resource "github_repository" "fork_repo" {

Possibly related to #2383 ?

Also tried re-running the Terraform plan/apply based on comments in #2145
but the Github repository was actually created during the first apply, and wasn't fully provisioned or persisted to the tfstate, so the retry fails.

422 Could not clone: Name already exists on this account

Terraform Version

Terraform v1.13.0
on linux_amd64

• provider registry.terraform.io/integrations/github v6.9.0

Affected Resource(s)

• github_repository

Terraform Configuration Files

resource "github_repository" "fork_repo" {
  name        = var.repo_name
  description = var.repo_description
  visibility  = "private"

  archive_on_destroy     = true
  delete_branch_on_merge = true

  # Add vulnerability alerts for all repositories
  vulnerability_alerts = true

  security_and_analysis {
    advanced_security {
      status = "enabled"
    }
    secret_scanning {
      status = "enabled"
    }
    secret_scanning_push_protection {
      status = "enabled"
    }
  }

  # Create repo by forking a source Github repo
  fork         = var.fork
  source_owner = var.source_owner
  source_repo  = var.source_repo

Steps to Reproduce

$ terraform apply

Debug Output

Panic Output

Code of Conduct

• I agree to follow this project's Code of Conduct

[github-actions]

👋 Hi! Thank you for this contribution! Just to let you know, our GitHub SDK team does a round of issue and PR reviews twice a week, every Monday and Friday! We have a process in place for prioritizing and responding to your input. Because you are a part of this community please feel free to comment, add to, or pick up any issues/PRs that are labeled with Status: Up for grabs. You & others like you are the reason all of this works! So thank you & happy coding! 🚀

[deiga]

Hi @jrbeilke 👋

Looking at the resource definition and the GH API message it seems like your Organization might not have a license for GH Advanced Security and Secret Scanning.

Can you verify if that's the case?

If it is enabled and this should work, could you paste the output of TF_LOG=DEBUG terraform apply for us?