Skip to content

Commit 7bd364b

Browse files
authored
feat: Added Gitleaks workflow to detect secrets (#1)
1 parent 6a4f06e commit 7bd364b

1 file changed

Lines changed: 32 additions & 0 deletions

File tree

Lines changed: 32 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,32 @@
1+
name: Secret Detection
2+
3+
on:
4+
pull_request:
5+
types: [opened, synchronize, reopened]
6+
push:
7+
branches:
8+
- 'master'
9+
10+
concurrency:
11+
group: ${{ github.workflow }}-${{ github.ref }}
12+
cancel-in-progress: true
13+
14+
jobs:
15+
scan:
16+
name: Secret Detection
17+
runs-on: ubuntu-latest
18+
timeout-minutes: 10
19+
permissions:
20+
contents: read
21+
pull-requests: read
22+
23+
steps:
24+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 #v4
25+
with:
26+
fetch-depth: 0
27+
28+
- uses: gitleaks/gitleaks-action@ff98106e4c7b2bc287b24eaf42907196329070c7 #v2
29+
name: Secret Detection
30+
env:
31+
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
32+
GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }}

0 commit comments

Comments
 (0)