fix: Changes found by pre-commit (#381)

jwhitlock · web-flow · commit b95bd2c0728c · 2025-09-24T11:48:05.000-05:00
* docs: Add terraform-docs link

* fix: typos

* fix: ignore false-positive secret

* fix: trailing whitespace
diff --git a/README.md b/README.md
@@ -9,6 +9,8 @@ These modules are intended for Mozilla usage internally. They are not built or s
 ### Pre-commit Checks
 This repository uses [pre-commit](https://pre-commit.com/) for running some pre-git-commit checks. Install pre-commit locally (see link for instructions) for your own workspace to also run these checks on every git commit. Pipenv files are included optionally if you use such tooling for managing your pre-commit (or other Python packages) installation.
 
+To run documentation checks, you will need to install [terraform-docs](https://terraform-docs.io/).
+
 This repository also uses [GitHub Actions](.github/workflows/ci.yaml) to run stateless (e.g. no Terraform state or provider connections required) automated checks, including the following:
 * terraform fmt --recursive & terraform validate for each module directory;
 * for each module (top level subdirectory):
diff --git a/aws_gke_oidc_config/main.tf b/aws_gke_oidc_config/main.tf
@@ -1,5 +1,5 @@
-/* 
- * # AWS-GKE OIDC Config 
+/*
+ * # AWS-GKE OIDC Config
  * This module will create an AWS OIDC config that creates a trust relationship between a GKE cluster & AWS account.
  *
  * Once this module has been invoked for a given account + GKE cluster, the `aws_gke_oidc_role` module can be used
diff --git a/aws_gke_oidc_config/variables.tf b/aws_gke_oidc_config/variables.tf
@@ -1,4 +1,4 @@
-### Required 
+### Required
 
 variable "gcp_region" {
   description = "GKE cluster's GCP region"
diff --git a/aws_gke_oidc_role/.terraform-docs.yml b/aws_gke_oidc_role/.terraform-docs.yml
@@ -6,7 +6,7 @@ content: |-
   ```hcl
   {{ include "examples/role_and_config/main.tf" }}
   ```
-  
+
   ```hcl
   {{ include "examples/role_with_policy/main.tf" }}
   ```
diff --git a/aws_gke_oidc_role/CHANGELOG.md b/aws_gke_oidc_role/CHANGELOG.md
@@ -1,4 +1,4 @@
-## 1.0.0 
+## 1.0.0
 
 ## 0.1.0
 * PR [#239](https://github.com/mozilla/terraform-modules/pull/239) - feat: add aws_gke_oidc_config and aws_gke_oidc_role modules
diff --git a/aws_gke_oidc_role/main.tf b/aws_gke_oidc_role/main.tf
@@ -1,11 +1,11 @@
-/* 
- * # AWS-GKE OIDC Role 
+/*
+ * # AWS-GKE OIDC Role
  * This module will create an AWS role that will allow a specified GKE service account to assume it.
  *
  * Requires that `../aws_gke_oidc_config` has been applied for a given AWS account + GKE cluster combination
- * if you get an error about the `aws_iam_openid_connect_provider` data source being missing, apply that module. 
+ * if you get an error about the `aws_iam_openid_connect_provider` data source being missing, apply that module.
  *
- * After creating these resources, add the following environment variables, volumes, and volume mounts to your pod definition: 
+ * After creating these resources, add the following environment variables, volumes, and volume mounts to your pod definition:
  * * env:
  * ```
  * - name: AWS_REGION
diff --git a/aws_gke_oidc_role/variables.tf b/aws_gke_oidc_role/variables.tf
@@ -1,4 +1,4 @@
-### Required 
+### Required
 
 variable "iam_policy_arns" {
   description = "One or more policy arns to attach to created AWS role"
diff --git a/google_cdn_backend_bucket/main.tf b/google_cdn_backend_bucket/main.tf
@@ -1,6 +1,6 @@
 /*
  * # google_cdn_backend_bucket
- * 
+ *
  * this module builds a GCP Load Balancer with a backend bucket
  */
 
diff --git a/google_cloudsql_postgres/.terraform-docs.yml b/google_cloudsql_postgres/.terraform-docs.yml
@@ -15,5 +15,5 @@ content: |-
 
   {{ .Inputs }}
 
-  {{ .Outputs }}  
+  {{ .Outputs }}
 
diff --git a/google_cloudsql_postgres/README.md b/google_cloudsql_postgres/README.md
@@ -169,5 +169,5 @@ module "postgres_database" {
 | <a name="output_replica_public_ip_address"></a> [replica\_public\_ip\_address](#output\_replica\_public\_ip\_address) | n/a |
 | <a name="output_self_link"></a> [self\_link](#output\_self\_link) | n/a |
 | <a name="output_service_account"></a> [service\_account](#output\_service\_account) | n/a |
-| <a name="output_tier"></a> [tier](#output\_tier) | n/a |  
+| <a name="output_tier"></a> [tier](#output\_tier) | n/a |
 <!-- END_TF_DOCS -->
diff --git a/google_datastream/main.tf b/google_datastream/main.tf
@@ -1,6 +1,6 @@
 /**
  * # google_datastream
- * 
+ *
  * ## WARNING! This is module only does part of the work. Because setting up postgresql as a source (the only thing I've tested) requires a valid database username and password, and we don't want to store passwords in Terraform, this module will only create a Private Connectivity Connection and a BigQuery Destination profile.
  * ### Prework
  * - Pick a new /29 network for Datastream to use. This is the datastream_subnet under Inputs below. Add the subnet to https://mozilla-hub.atlassian.net/wiki/spaces/SRE/pages/27920489/GCP+Subnet+Allocations for tracking
@@ -56,7 +56,7 @@ resource "google_datastream_private_connection" "default" {
 #      hostname = postgresql_profile.value.hostname
 #      username = postgresql_profile.value.username
 #      database = postgresql_profile.value.database
-#      password = "thisisnotarealpassword"
+#      password = "thisisnotarealpassword"  # pragma: allowlist secret
 #    }
 #  }
 #
diff --git a/google_fastly_waf/README.md b/google_fastly_waf/README.md
@@ -55,7 +55,7 @@ module "fastly_maintenance_page" {
   #    here if you only want to have maintenance on a particular route or
   #    api endpoint. Setting it to "true" matches all requests
   # 2. A `response_object` which binds to your `condition` and can serve any
-  #    static content. Here we have a very basic static HTML page but this could 
+  #    static content. Here we have a very basic static HTML page but this could
   #    be json or an error page etc.
 
   conditions = [
@@ -100,8 +100,8 @@ EOF
 # Fastly supports deploying your VCL to a "staging" environment. This environment
 # has a different IP that requires you to override your local `/etc/hosts` to test
 # https://docs.fastly.com/products/staging
-# 
-# The workflow to deploy stage would be to add the `stage = true` arguement for
+#
+# The workflow to deploy stage would be to add the `stage = true` argument for
 # the module, verify your changes look correct, then remove (or comment out) the
 # `stage` argument and apply again. This will promote your changes to production.
 module "fastly_stage" {
diff --git a/google_fastly_waf/examples/example_maintenance_page.tf b/google_fastly_waf/examples/example_maintenance_page.tf
@@ -21,7 +21,7 @@ module "fastly_maintenance_page" {
   #    here if you only want to have maintenance on a particular route or
   #    api endpoint. Setting it to "true" matches all requests
   # 2. A `response_object` which binds to your `condition` and can serve any
-  #    static content. Here we have a very basic static HTML page but this could 
+  #    static content. Here we have a very basic static HTML page but this could
   #    be json or an error page etc.
 
   conditions = [
diff --git a/google_fastly_waf/examples/example_stage.tf b/google_fastly_waf/examples/example_stage.tf
@@ -2,7 +2,7 @@
 # has a different IP that requires you to override your local `/etc/hosts` to test
 # https://docs.fastly.com/products/staging
 #
-# The workflow to deploy stage would be to add the `stage = true` arguement for
+# The workflow to deploy stage would be to add the `stage = true` argument for
 # the module, verify your changes look correct, then remove (or comment out) the
 # `stage` argument and apply again. This will promote your changes to production.
 module "fastly_stage" {
diff --git a/google_gar/README.md b/google_gar/README.md
@@ -26,7 +26,7 @@ module "gar" {
 | <a name="input_project"></a> [project](#input\_project) | n/a | `string` | `null` | no |
 | <a name="input_realm"></a> [realm](#input\_realm) | Realm, e.g. nonprod. | `string` | n/a | yes |
 | <a name="input_repository_id"></a> [repository\_id](#input\_repository\_id) | n/a | `string` | `null` | no |
-| <a name="input_repository_readers"></a> [repository\_readers](#input\_repository\_readers) | List of principals that should be granted read access to the respository. | `list(string)` | `[]` | no |
+| <a name="input_repository_readers"></a> [repository\_readers](#input\_repository\_readers) | List of principals that should be granted read access to the repository. | `list(string)` | `[]` | no |
 | <a name="input_writer_service_account_id"></a> [writer\_service\_account\_id](#input\_writer\_service\_account\_id) | n/a | `string` | `"artifact-writer"` | no |
 
 ## Outputs
diff --git a/google_gar/variables.tf b/google_gar/variables.tf
@@ -37,7 +37,7 @@ variable "project" {
 variable "repository_readers" {
   type        = list(string)
   default     = []
-  description = "List of principals that should be granted read access to the respository."
+  description = "List of principals that should be granted read access to the repository."
 }
 
 variable "writer_service_account_id" {
diff --git a/google_gke/README.md b/google_gke/README.md
@@ -177,11 +177,11 @@ module "gke" {
 | <a name="input_maintenance_exclusions"></a> [maintenance\_exclusions](#input\_maintenance\_exclusions) | List of maintenance exclusions. A cluster can have up to three | `list(object({ name = string, start_time = string, end_time = string }))` | `[]` | no |
 | <a name="input_maintenance_start_time"></a> [maintenance\_start\_time](#input\_maintenance\_start\_time) | Time window specified for daily or recurring maintenance operations in RFC3339 format | `string` | `"21:00"` | no |
 | <a name="input_master_authorized_networks"></a> [master\_authorized\_networks](#input\_master\_authorized\_networks) | List of master authorized networks that can access the GKE Master Plane. If none are provided, it defaults to known Bastion hosts for the given realm. See locals.tf for defaults. | `list(object({ cidr_block = string, display_name = string }))` | <pre>[<br/>  {<br/>    "cidr_block": "192.0.0.8/32",<br/>    "display_name": "tf module placeholder"<br/>  }<br/>]</pre> | no |
-| <a name="input_master_ipv4_cidr_block"></a> [master\_ipv4\_cidr\_block](#input\_master\_ipv4\_cidr\_block) | The IP range in CIDR notation to use for the hosted master network. Overidden by shared\_vpc\_outputs. | `string` | `null` | no |
+| <a name="input_master_ipv4_cidr_block"></a> [master\_ipv4\_cidr\_block](#input\_master\_ipv4\_cidr\_block) | The IP range in CIDR notation to use for the hosted master network. Overridden by shared\_vpc\_outputs. | `string` | `null` | no |
 | <a name="input_monitoring_config_enable_components"></a> [monitoring\_config\_enable\_components](#input\_monitoring\_config\_enable\_components) | Monitoring configuration for the cluster | `list(string)` | <pre>[<br/>  "SYSTEM_COMPONENTS",<br/>  "SCHEDULER",<br/>  "CONTROLLER_MANAGER",<br/>  "STORAGE",<br/>  "HPA",<br/>  "POD",<br/>  "DAEMONSET",<br/>  "DEPLOYMENT",<br/>  "STATEFULSET"<br/>]</pre> | no |
 | <a name="input_monitoring_enable_managed_prometheus"></a> [monitoring\_enable\_managed\_prometheus](#input\_monitoring\_enable\_managed\_prometheus) | Configuration for Managed Service for Prometheus. Whether or not the managed collection is enabled. | `bool` | `false` | no |
 | <a name="input_name"></a> [name](#input\_name) | Name of the cluster or application (required). | `string` | n/a | yes |
-| <a name="input_network"></a> [network](#input\_network) | Shared VPC Network (formulated as a URL) wherein the cluster will be created. Overidden by shared\_vpc\_outputs. | `string` | `null` | no |
+| <a name="input_network"></a> [network](#input\_network) | Shared VPC Network (formulated as a URL) wherein the cluster will be created. Overridden by shared\_vpc\_outputs. | `string` | `null` | no |
 | <a name="input_node_pool_sa_roles"></a> [node\_pool\_sa\_roles](#input\_node\_pool\_sa\_roles) | n/a | `list` | <pre>[<br/>  "roles/logging.logWriter",<br/>  "roles/monitoring.metricWriter",<br/>  "roles/monitoring.viewer",<br/>  "roles/stackdriver.resourceMetadata.writer"<br/>]</pre> | no |
 | <a name="input_node_pools"></a> [node\_pools](#input\_node\_pools) | Map containing node pools, with each node pool's name (or name\_prefix if `use_name_prefix` is true) being the key and the values being that node pool's configurations. Configurable options per node pool include: `disk_size_gb` (string), `disk_type` (string), `machine_type` (string), `max_count` (number), `max_surge` (number), `max_unavailable` (number), `min_count` (number), `use_name_prefix` (bool). See locals.tf for defaults. | `list(map(string))` | <pre>[<br/>  {<br/>    "name": "tf-default-node-pool"<br/>  }<br/>]</pre> | no |
 | <a name="input_node_pools_guest_accelerator"></a> [node\_pools\_guest\_accelerator](#input\_node\_pools\_guest\_accelerator) | Map containing node pools guest accelerator. Each node pool's name is the key. See locals.tf for defaults. | `map(map(string))` | <pre>{<br/>  "tf-default-node-pool": {}<br/>}</pre> | no |
@@ -191,7 +191,7 @@ module "gke" {
 | <a name="input_node_pools_sysctls"></a> [node\_pools\_sysctls](#input\_node\_pools\_sysctls) | Map containing node pools non-default linux node config sysctls (as a map of maps). Each node pool's name is the key. | `map(map(any))` | <pre>{<br/>  "tf-default-node-pool": {}<br/>}</pre> | no |
 | <a name="input_node_pools_tags"></a> [node\_pools\_tags](#input\_node\_pools\_tags) | Map containing node pools non-default tags (as an list). Each node pool's name is the key. See locals.tf for defaults. | `map(list(string))` | <pre>{<br/>  "tf-default-node-pool": []<br/>}</pre> | no |
 | <a name="input_node_pools_taints"></a> [node\_pools\_taints](#input\_node\_pools\_taints) | Map containing node pools taints. Each node pool's name is the key. See locals.tf for defaults. | `map(list(map(string)))` | <pre>{<br/>  "tf-default-node-pool": [<br/>    {}<br/>  ]<br/>}</pre> | no |
-| <a name="input_pods_ip_cidr_range_name"></a> [pods\_ip\_cidr\_range\_name](#input\_pods\_ip\_cidr\_range\_name) | The Name of the IP address range for cluster pods IPs. Overidden by shared\_vpc\_outputs. | `string` | `null` | no |
+| <a name="input_pods_ip_cidr_range_name"></a> [pods\_ip\_cidr\_range\_name](#input\_pods\_ip\_cidr\_range\_name) | The Name of the IP address range for cluster pods IPs. Overridden by shared\_vpc\_outputs. | `string` | `null` | no |
 | <a name="input_project_id"></a> [project\_id](#input\_project\_id) | The project ID to host the cluster in. | `string` | `null` | no |
 | <a name="input_project_outputs"></a> [project\_outputs](#input\_project\_outputs) | Sets cluster-related variables based on a homegrown Project outputs data structure. | <pre>object({<br/>    id            = string<br/>    name          = string<br/>    number        = string<br/>    zone_dns_name = string<br/>    zone_name     = string<br/>  })</pre> | `null` | no |
 | <a name="input_realm"></a> [realm](#input\_realm) | Name of infrastructure realm (e.g. prod or nonprod). | `string` | n/a | yes |
@@ -201,9 +201,9 @@ module "gke" {
 | <a name="input_resource_usage_export_dataset_id"></a> [resource\_usage\_export\_dataset\_id](#input\_resource\_usage\_export\_dataset\_id) | The ID of a BigQuery Dataset for using BigQuery as the destination of resource usage export. Defaults to null. | `string` | `null` | no |
 | <a name="input_service_account_id"></a> [service\_account\_id](#input\_service\_account\_id) | Id of the service account to be provisioned, overrides the default 'gke-cluster\_name' value | `string` | `null` | no |
 | <a name="input_service_subnetworks"></a> [service\_subnetworks](#input\_service\_subnetworks) | Service subnetworks associated with Shared VPC, segmented by region | <pre>map(object({<br/>    ip_cidr_range = string<br/>    network       = string<br/>    region        = string<br/>    subnet_name   = string<br/>    subnetwork    = string<br/>    subnetwork_id = string<br/>  }))</pre> | `null` | no |
-| <a name="input_services_ip_cidr_range_name"></a> [services\_ip\_cidr\_range\_name](#input\_services\_ip\_cidr\_range\_name) | The Name of the IP address range for cluster services IPs. Overidden by shared\_vpc\_outputs. | `string` | `null` | no |
+| <a name="input_services_ip_cidr_range_name"></a> [services\_ip\_cidr\_range\_name](#input\_services\_ip\_cidr\_range\_name) | The Name of the IP address range for cluster services IPs. Overridden by shared\_vpc\_outputs. | `string` | `null` | no |
 | <a name="input_shared_vpc_outputs"></a> [shared\_vpc\_outputs](#input\_shared\_vpc\_outputs) | Sets networking-related variables based on a homegrown Shared VPC Terraform outputs data structure. | <pre>object({<br/>    ip_cidr_range = object({<br/>      master     = string<br/>      pod        = string<br/>      primary    = string<br/>      service    = string<br/>      additional = map(string)<br/>    })<br/>    network    = string<br/>    project_id = string<br/>    region     = string<br/>    secondary_ip_ranges = object({<br/>      pod = object({<br/>        ip_cidr_range = string<br/>        range_name    = string<br/>      })<br/>      service = object({<br/>        ip_cidr_range = string<br/>        range_name    = string<br/>      })<br/>    })<br/>    additional_ip_ranges = map(map(string))<br/>    subnet_name          = string<br/>    subnetwork           = string<br/>    subnetwork_id        = string<br/>  })</pre> | `null` | no |
-| <a name="input_subnetwork"></a> [subnetwork](#input\_subnetwork) | Shared VPC Subnetwork (formulated as a URL) wherein the cluster will be created. Overidden by shared\_vpc\_outputs. | `string` | `null` | no |
+| <a name="input_subnetwork"></a> [subnetwork](#input\_subnetwork) | Shared VPC Subnetwork (formulated as a URL) wherein the cluster will be created. Overridden by shared\_vpc\_outputs. | `string` | `null` | no |
 | <a name="input_tags"></a> [tags](#input\_tags) | The GCE resource tags (a list of strings) to be applied to the cluster & other cluster-related resources. Merged with default tags (see locals.tf). | `list(string)` | `[]` | no |
 
 ## Outputs
diff --git a/google_gke/variables.tf b/google_gke/variables.tf
@@ -183,31 +183,31 @@ variable "master_authorized_networks" {
 
 variable "master_ipv4_cidr_block" {
   default     = null
-  description = "The IP range in CIDR notation to use for the hosted master network. Overidden by shared_vpc_outputs."
+  description = "The IP range in CIDR notation to use for the hosted master network. Overridden by shared_vpc_outputs."
   type        = string
 }
 
 variable "network" {
   default     = null
-  description = "Shared VPC Network (formulated as a URL) wherein the cluster will be created. Overidden by shared_vpc_outputs."
+  description = "Shared VPC Network (formulated as a URL) wherein the cluster will be created. Overridden by shared_vpc_outputs."
   type        = string
 }
 
 variable "pods_ip_cidr_range_name" {
   default     = null
-  description = "The Name of the IP address range for cluster pods IPs. Overidden by shared_vpc_outputs."
+  description = "The Name of the IP address range for cluster pods IPs. Overridden by shared_vpc_outputs."
   type        = string
 }
 
 variable "services_ip_cidr_range_name" {
   default     = null
-  description = "The Name of the IP address range for cluster services IPs. Overidden by shared_vpc_outputs."
+  description = "The Name of the IP address range for cluster services IPs. Overridden by shared_vpc_outputs."
   type        = string
 }
 
 variable "subnetwork" {
   default     = null
-  description = "Shared VPC Subnetwork (formulated as a URL) wherein the cluster will be created. Overidden by shared_vpc_outputs."
+  description = "Shared VPC Subnetwork (formulated as a URL) wherein the cluster will be created. Overridden by shared_vpc_outputs."
   type        = string
 }
 
diff --git a/google_gke_namespace_logging/README.md b/google_gke_namespace_logging/README.md
@@ -1,5 +1,5 @@
 <!-- BEGIN_TF_DOCS -->
-# Terraform Module: GKE Tenant Namepsace Logging
+# Terraform Module: GKE Tenant Namespace Logging
 Creates a logging bucket and grants access to the logging service account so that
 GKE Logs associated with the tenant namespace are available in the tenant project.
 The log routing configuration happens as part of the GKE tenant bootstrapping.
diff --git a/google_gke_namespace_logging/main.tf b/google_gke_namespace_logging/main.tf
@@ -1,5 +1,5 @@
 /**
- * # Terraform Module: GKE Tenant Namepsace Logging
+ * # Terraform Module: GKE Tenant Namespace Logging
  * Creates a logging bucket and grants access to the logging service account so that
  * GKE Logs associated with the tenant namespace are available in the tenant project.
  * The log routing configuration happens as part of the GKE tenant bootstrapping.
diff --git a/google_monitoring/examples/README.md b/google_monitoring/examples/README.md
@@ -16,7 +16,7 @@ In addition to HTTP uptime checks, you can deploy Cloud Functions as synthetic m
   - 'roles/logging.logWriter'
   - 'roles/artifactregistry.writer'
   - 'roles/cloudbuild.builds.builder'
-  - 'roles/storage.objectViewer' with a condition to buckets which their names follows the format 'gcf-v2-sources-' , 'gcf-v2-uploads-' or 'run-soruces-'
+  - 'roles/storage.objectViewer' with a condition to buckets which their names follows the format 'gcf-v2-sources-' , 'gcf-v2-uploads-' or 'run-sources-'
 
 
 
diff --git a/google_permissions/examples/basic/README.md b/google_permissions/examples/basic/README.md
@@ -1,5 +1,5 @@
 # Basic Example
 
-This example shows how to grant just the core set of permissions as specified [here](../../main.tf). 
+This example shows how to grant just the core set of permissions as specified [here](../../main.tf).
 
 This is a good way to get started on most projects.
diff --git a/google_permissions/examples/basic_with_addon/README.md b/google_permissions/examples/basic_with_addon/README.md
@@ -1,5 +1,5 @@
 # Basic With Additional Role Example
 
-This example shows how to grant the core set of permissions as specified [here](../../main.tf) but then add additional roles to the project. 
+This example shows how to grant the core set of permissions as specified [here](../../main.tf) but then add additional roles to the project.
 
 The current list of available additional roles can be found [here](../../other_roles.tf)
diff --git a/google_redis/README.md b/google_redis/README.md
diff --git a/google_redis/variables.tf b/google_redis/variables.tf

Original file line number	Diff line number	Diff line change
`@@ -1,5 +1,5 @@`
`1`		`-/*`
`2`		`- * # AWS-GKE OIDC Config`
	`1`	`+/*`
	`2`	`+ * # AWS-GKE OIDC Config`
`3`	`3`	`* This module will create an AWS OIDC config that creates a trust relationship between a GKE cluster & AWS account.`
`4`	`4`	`*`
`5`	`5`	* Once this module has been invoked for a given account + GKE cluster, the `aws_gke_oidc_role` module can be used
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-### Required`
	`1`	`+### Required`
`2`	`2`
`3`	`3`	`variable "gcp_region" {`
`4`	`4`	`description = "GKE cluster's GCP region"`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-## 1.0.0`
	`1`	`+## 1.0.0`
`2`	`2`
`3`	`3`	`## 0.1.0`
`4`	`4`	`* PR [#239](https://github.com/mozilla/terraform-modules/pull/239) - feat: add aws_gke_oidc_config and aws_gke_oidc_role modules`
-Original file line number
+Diff line change
@@ @@ -1,6 +1,6 @@ @@
 /*
  * # google_cdn_backend_bucket
 - *
 + *
  * this module builds a GCP Load Balancer with a backend bucket
  */
Original file line number	Diff line number	Diff line change
`@@ -15,5 +15,5 @@ content: \|-`
`15`	`15`
`16`	`16`	`{{ .Inputs }}`
`17`	`17`
`18`		`- {{ .Outputs }}`
	`18`	`+ {{ .Outputs }}`
`19`	`19`