From 2ed0fa81ca02300f0963f2d6ab0f8dbaa797ca72 Mon Sep 17 00:00:00 2001 From: Jeff Qiu Date: Thu, 13 Jun 2024 11:50:33 -0400 Subject: [PATCH] Update secret-scanner.yml --- .github/workflows/secret-scanner.yml | 21 +++------------------ 1 file changed, 3 insertions(+), 18 deletions(-) diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml index 821095300..6518fa80b 100644 --- a/.github/workflows/secret-scanner.yml +++ b/.github/workflows/secret-scanner.yml @@ -1,5 +1,5 @@ # Secret-scanner workflow from Arista Networks. -on: +on: pull_request: types: [synchronize] push: @@ -10,21 +10,6 @@ jobs: scan_secret: name: Scan incoming changes runs-on: ubuntu-latest - container: - image: ghcr.io/aristanetworks/secret-scanner-service:main - options: --name sss-scanner - steps: - - name: Checkout ${{ github.ref }} - # Hitting https://github.com/actions/checkout/issues/334 so trying v1 - uses: actions/checkout@v1 - with: - fetch-depth: 0 + steps: - name: Run scanner - run: | - git config --global --add safe.directory $GITHUB_WORKSPACE - scanner commit . github ${{ github.repository }} \ - --markdown-file job_summary.md \ - ${{ github.event_name == 'pull_request' && format('--since-commit {0}', github.event.pull_request.base.sha) || ''}} - - name: Write result to summary - run: cat ./job_summary.md >> $GITHUB_STEP_SUMMARY - if: ${{ always() }} + uses: aristanetworks/secret-scanner-service-public@main