feat: test gitguardian (#463)

* feat: test gitguardian

* feat: add github actions

* feat: key

.github/workflows/gitguardian.yml

@@ -0,0 +1,21 @@
+name: GitGuardian scan
+
+on: [push, pull_request]
+
+jobs:
+  scanning:
+    name: GitGuardian scan
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0 # fetch all history so multiple commits can be scanned
+      - name: GitGuardian scan
+        uses: GitGuardian/[email protected]
+        env:
+          GITHUB_PUSH_BEFORE_SHA: ${{ github.event.before }}
+          GITHUB_PUSH_BASE_SHA: ${{ github.event.base }}
+          GITHUB_PULL_BASE_SHA: ${{ github.event.pull_request.base.sha }}
+          GITHUB_DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
+          GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }}

.talismanrc

@@ -22,6 +22,10 @@ fileignoreconfig:
     ignore_detectors: ["filename", "filesize", "filecontent"]
   - filename: server/src/jobs/seed/referentielRome/unix_fiche_emploi_metier_v450_iso8859-15.xml
     checksum: 7257a3a49d3170754fd55316bf78b680866465400c46e11727daa5da00863347
+  - filename: server/src/config.ts
+    checksum: 936ab034b4ef4228b377301733f76dff41cd75215f8ea06e873626bbccfd603d
+  - filename: .github/workflows/gitguardian.yml
+    checksum: 6570536d75569b3826026d9126cff26fc4de473afbab8adbfc9fab833362fb79
 scopeconfig:
   - scope: node
 custom_patterns:

server/src/config.ts

@@ -129,6 +129,10 @@ const config = {
     region: env.get("LBA_S3_REGION").default("ABC").asString(),
     bucket: env.get("LBA_S3_BUCKET").default("Bucket").asString(),
   },
+  test: {
+    login: "[email protected]",
+    password: "52a92a9b-4945-4afa-877b-1b75fea691f8",
+  },
 }
 
 export default config