Sulkta-OSS/varroa
3
0
Fork 0
Code Issues 1 Pull requests 10 Projects Releases Packages Wiki Activity Actions

docs: public-facing README + MIT LICENSE; genericize CI workflow comment

Browse source
This commit is contained in:
Sulkta 2026-06-28 20:14:11 -07:00
parent c50e47522d
commit e8e3a64894
3 changed files with 128 additions and 42 deletions
Download patch file Download diff file Expand all files Collapse all files

16
.forgejo/workflows/gitleaks.yml
View file

@ -1,16 +1,6 @@
# .forgejo/workflows/gitleaks.yml
#
# Sulkta canonical gitleaks workflow. Drop a copy into every public repo at
# `.forgejo/workflows/gitleaks.yml` after the Forgejo act_runner is registered
# (task #295).
#
# Pairs with the pre-receive hook installed on every bare repo — that one is
# the strict enforcement layer (rejects the push); this one provides the
# per-PR red ✗ that branch-protection rules can require before merge.
#
# Layer 1 (this workflow): visible per-PR status, can be a required check.
# Layer 2 (pre-receive hook): strict enforcement at the server.
# Layer 3 (johnny5 cron sweep): nightly full-history sweep across all repos.
# Scan the repository for committed secrets with gitleaks on every push and
# pull request. The job fails (and can be made a required check) if a secret
# is detected, so credentials never land in history.
name: gitleaks