guard-api-key-leak.yaml

name: Guard API Key Leak
on:
  schedule:
    - cron: '0 0 * * *'  # Runs every day at 00:00 UTC

jobs:
  detect-key-leak:
    runs-on: ubuntu-latest

    steps:
    - name: Check out code
      uses: actions/checkout@v3

    - name: yarn build
      run: yarn && yarn build
      working-directory: ./generator/konfig-dash
      env:
        # required to avoid `Usage Error: Environment variable not found (NPM_TOKEN)`
        NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

    - name: Detect API key leaks
      run: ./generator/konfig-dash/bash-scripts/guard-api-key-leak.sh