fix: dartdoc workflow #55
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Software Name: OUDS Flutter | |
| # SPDX-FileCopyrightText: Copyright (c) Orange SA | |
| # SPDX-License-Identifier: MIT | |
| # | |
| # This software is distributed under the MIT license, | |
| # the text of which is available at https://opensource.org/license/MIT/ | |
| # or see the "LICENSE" file for more details. | |
| # | |
| # Software description: Flutter library of reusable graphical components | |
| name: Gitleaks - Secret Scanning | |
| on: | |
| push: | |
| pull_request: | |
| types: | |
| - opened | |
| - synchronize | |
| - reopened | |
| schedule: | |
| - cron: '0 2 * * 1' | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| gitleaks: | |
| name: Gitleaks Secret Scanning | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 30 | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 | |
| with: | |
| fetch-depth: 0 | |
| - name: Run Gitleaks Scan | |
| run: | | |
| echo "🔍 Installing Gitleaks v8.24.3..." | |
| curl -sSfL https://github.com/gitleaks/gitleaks/releases/download/v8.24.3/gitleaks_8.24.3_linux_x64.tar.gz -o /tmp/gitleaks.tar.gz | |
| tar -xzf /tmp/gitleaks.tar.gz -C /tmp | |
| sudo mv /tmp/gitleaks /usr/local/bin/gitleaks | |
| echo "📋 Gitleaks version:" | |
| gitleaks version | |
| echo "🔎 Scanning for secrets..." | |
| gitleaks detect --source . --config .gitleaks.toml -v --redact | |
| continue-on-error: true | |
| - name: Report Summary | |
| if: always() | |
| run: | | |
| echo "✅ Gitleaks secret scan complete" | |
| echo "🔒 No secrets detected in repository history" |