SEC-1742: Plume Infosec - Secret Scanning

Issue: Enable secret detection on pull requests to default branch Signed-off-by: Alan Gonzalez <[email protected]>
plume-design · Mar 30, 2022 · e6d217d · e6d217d
1 parent 558aa4b
commit e6d217d
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/.github/workflows/repo-compliance-scan.yml b/.github/workflows/repo-compliance-scan.yml
@@ -0,0 +1,13 @@
+name: Infosec Compliance
+
+on:
+  workflow_dispatch:
+  pull_request:
+    branches: [ $default-branch ]
+
+jobs:
+  scan:
+    name: Code scan
+    uses: plume-design-inc/infosec-appsec/.github/workflows/compliance-scan.yml@main
+    secrets:
+      SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}