Add gitleaks scan to CI (#284)

apollographql · Oct 17, 2023 · 0d7e9cd · 0d7e9cd
1 parent 73baf89
commit 0d7e9cd
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/.circleci/config.yml b/.circleci/config.yml
@@ -4,6 +4,7 @@ version: 2.1
 
 orbs:
   gcp-cli: circleci/[email protected]
+  secops: apollo/[email protected]
 
 executors:
   node:
@@ -417,4 +418,12 @@ workflows:
           filters:
             branches:
               only: main
-
+  security-scans:
+    jobs:
+      - secops/gitleaks:
+          context:
+            - platform-docker-ro
+            - github-orb
+            - secops-oidc
+          git-base-revision: <<#pipeline.git.base_revision>><<pipeline.git.base_revision>><</pipeline.git.base_revision >>
+          git-revision: << pipeline.git.revision >>