added a secrets workflow

SecureStackCo · Feb 2, 2022 · c2c3584 · c2c3584
1 parent 9167878
commit c2c3584
Showing 1 changed file with 19 additions and 0 deletions.
diff --git a/.github/workflows/securestack-secrets.yml b/.github/workflows/securestack-secrets.yml
@@ -0,0 +1,19 @@
+name: Example SecureStack Secrets Analysis GitHub Action
+on: push
+jobs:
+  security:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repo for running secrets analysis within workflow
+        id: checkout
+        uses: actions/[email protected]
+        with:
+          fetch-depth: 0
+      - name: Secrets Analysis Step
+        id: secrets
+        uses: SecureStackCo/[email protected]
+        with:
+          securestack_api_key: ${{ secrets.SECURESTACK_API_KEY }}
+          securestack_app_id: ${{ secrets.SECURESTACK_APP_ID }}
+          severity: critical
+          flags: '-d 1'