diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml index 0f60a33..cf56a0b 100644 --- a/.github/workflows/gitleaks.yml +++ b/.github/workflows/gitleaks.yml @@ -31,7 +31,8 @@ jobs: if: always() run: | echo "### Gitleaks detected secrets" >> $GITHUB_STEP_SUMMARY - jq -r '.runs[0].results[] | "🔴 *File:* \(.locations[].physicalLocation.artifactLocation.uri)\n - *Secret:* \(.message.text)\n - *Rule ID:* \(.ruleId)"' results.sarif >> $GITHUB_STEP_SUMMARY + echo "| 🔴 *File* | *Secret* | *Rule ID* |" >> $GITHUB_STEP_SUMMARY + echo "| --- | --- | --- |" >> $GITHUB_STEP_SUMMARY + jq -r '.runs[0].results[] | "| \(.locations[].physicalLocation.artifactLocation.uri) | \(.message.text) | \(.ruleId) |"' results.sarif >> $GITHUB_STEP_SUMMARY cat $GITHUB_STEP_SUMMARY - # cat results.sarif | jq '.runs[0].results[] | {message: .message.text, ruleId: .ruleId, locations: .locations[].physicalLocation.artifactLocation.uri}' continue-on-error: true \ No newline at end of file