Allow fetching module in GitHub workflow

* Adding a personal access token as repository secret
* Fetch the module via https

Author: bogsi17

.github/workflows/deploy-backup-infrastructure.yml

@@ -2,6 +2,7 @@ name: Deploy Backup vault infrastructure
 run-name: Deploy backup vault infrastructure for ${{ inputs.environment }}
 
 on:
+  push:
   workflow_dispatch:
     inputs:
       environment:
@@ -46,8 +47,11 @@ jobs:
           terraform_version: 1.10.5
       - name: Terraform Plan
         id: plan
+        env:
+          PERSONAL_ACCESS_TOKEN: ${{ secrets.BACKUP_MODULES_ACCESS_TOKEN }}
         run: |
           set -e
+          git config --global url."https://foo:${PERSONAL_ACCESS_TOKEN}@github.com/NHSDigital".insteadOf "https://github.com/NHSDigital"
           terraform init -backend-config="env/${{ inputs.environment }}-backend.hcl" -upgrade
           terraform plan -var-file="env/${{ inputs.environment }}.tfvars" \
           -out ${{ runner.temp }}/tfplan | tee ${{ runner.temp }}/tf_stdout
@@ -86,7 +90,10 @@ jobs:
         with:
           terraform_version: 1.10.5
       - name: Apply the changes
+        env:
+          PERSONAL_ACCESS_TOKEN: ${{ secrets.BACKUP_MODULES_ACCESS_TOKEN }}
         run: |
           set -e
+          git config --global url."https://foo:${PERSONAL_ACCESS_TOKEN}@github.com/NHSDigital".insteadOf "https://github.com/NHSDigital"
           terraform init -backend-config="env/${{ inputs.environment }}-backend.hcl" -upgrade
           terraform apply ${{ runner.temp }}/tfplan

terraform/backup/source/main.tf

@@ -116,7 +116,7 @@ resource "aws_kms_key" "backup_notifications" {
 # Now we can deploy the source and destination modules, referencing the resources we've created above.
 
 module "source" {
-  source = "git@github.com:NHSDigital/terraform-aws-backup.git//modules/aws-backup-source?ref=v1.1.0"
+  source = "github.com/NHSDigital/terraform-aws-backup.git//modules/aws-backup-source?ref=v1.1.0"
 
   backup_copy_vault_account_id = local.destination_account_id
   backup_copy_vault_arn        = var.destination_vault_arn