A sharp new GitHub Actions pipeline can now sniff out which Terraform environments changed - anywhere in the repo, no matter how nested - and run them in parallel. Fast, clean, and automatic.
It leans on matrix jobs, Checkov for static analysis, Workload Identity Federation for secure cloud access (no hardcoded creds), and conditional approvals before touching prod.











