44267a37f6
- README rewritten as a general-purpose, external-user-facing guide (what it is, build, install, usage, configuration, contributing, license). - gitleaks workflow header reduced to a generic description. - MILESTONES M0 scaffold line genericized.
30 lines
832 B
YAML
30 lines
832 B
YAML
# Scan the repository for accidentally-committed secrets with gitleaks on
|
|
# every push and pull request. Runs over full history so it catches secrets
|
|
# introduced in any commit in the pushed range.
|
|
|
|
name: gitleaks
|
|
|
|
on:
|
|
push:
|
|
pull_request:
|
|
|
|
jobs:
|
|
scan:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
# Full history — gitleaks needs depth to scan a commit range.
|
|
fetch-depth: 0
|
|
|
|
- name: install gitleaks
|
|
run: |
|
|
curl -sSL -o gl.tar.gz \
|
|
https://github.com/gitleaks/gitleaks/releases/download/v8.21.2/gitleaks_8.21.2_linux_x64.tar.gz
|
|
tar xzf gl.tar.gz gitleaks
|
|
chmod +x gitleaks
|
|
./gitleaks version
|
|
|
|
- name: scan
|
|
run: |
|
|
./gitleaks detect --source . --no-banner --redact --verbose
|