Skip to content

Test

Test #10

Workflow file for this run

name: "Find Secrets"
on:
pull_request:
push:
workflow_dispatch:
# schedule:
# - cron: "0 6 * * *"
permissions:
id-token: write
contents: read
actions: read
security-events: write
jobs:
scan:
name: gitleaks
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
with:
fetch-depth: 0
- uses: gitleaks/[email protected]
name: Check any Leaked Secrets
with:
args: detect --redact -v -f sarif -r ./gitleaks_scan.sarif
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
GITLEAKS_ENABLE_COMMENTS: 'true'
GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }}