Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ci: Public repo secret scanner #704

Merged
merged 13 commits into from
Jun 12, 2024
Merged

ci: Public repo secret scanner #704

Changes from all commits
Commits
Show all changes
13 commits
Select commit Hold shift + click to select a range
de9916f
fix: make the secret scanner workflow work for public repo
jzqiu-arista Jun 10, 2024
abc9f88
chore: rename workflow
jzqiu-arista Jun 10, 2024
e98048b
Update .github/workflows/secret-scanner.yml
gmuloc Jun 10, 2024
69c74c6
Merge branch 'main' into public-repo-secret-scanner
gmuloc Jun 11, 2024
7fc7d13
ci: Use native container in Github actions
gmuloc Jun 11, 2024
42ee89e
ci: Test checkout v1
gmuloc Jun 11, 2024
e553e42
ci: Not a rooted path
gmuloc Jun 11, 2024
b29ff69
ci: Refactor
gmuloc Jun 11, 2024
b8ffb91
ci: Fix path
gmuloc Jun 11, 2024
d36b999
ci: Test
gmuloc Jun 11, 2024
48259d6
ci: Test
gmuloc Jun 11, 2024
2ed3140
ci: Making the workflow generic
gmuloc Jun 11, 2024
4f8f935
Merge branch 'main' into public-repo-secret-scanner
gmuloc Jun 12, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 16 additions & 1 deletion .github/workflows/secret-scanner.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,21 @@ jobs:
scan_secret:
name: Scan incoming changes
runs-on: ubuntu-latest
container:
image: ghcr.io/aristanetworks/secret-scanner-service:main
options: --name sss-scanner
steps:
- name: Checkout ${{ github.ref }}
# Hitting https://github.com/actions/checkout/issues/334 so trying v1
uses: actions/checkout@v1
with:
fetch-depth: 0
- name: Run scanner
uses: aristanetworks/secret-scanner-service@main
run: |
git config --global --add safe.directory $GITHUB_WORKSPACE
scanner commit . github ${{ github.repository }} \
--markdown-file job_summary.md \
${{ github.event_name == 'pull_request' && format('--since-commit {0}', github.event.pull_request.base.sha) || ''}}
- name: Write result to summary
run: cat ./job_summary.md >> $GITHUB_STEP_SUMMARY
if: ${{ always() }}
Loading