Skip to content

feat: add secrets scanning workflow #1

feat: add secrets scanning workflow

feat: add secrets scanning workflow #1

# ============================================================
# Secrets Scan — managed by loopme/secrets
# DO NOT edit scanning logic here. To update rules or
# add exclusions, see: https://github.com/loopme/secrets/blob/main/docs/adding-exclusions.md
# ============================================================
name: Loopme Secrets Scanning
on:
pull_request:
push:
branches:
- main
- master
- develop
workflow_dispatch:
jobs:
scan:
uses: loopme/secrets/.github/workflows/loopme-secrets-scan.yml@main

Check failure on line 19 in .github/workflows/loopme-secrets-scan.yml

View workflow run for this annotation

GitHub Actions / .github/workflows/loopme-secrets-scan.yml

Invalid workflow file

error parsing called workflow ".github/workflows/loopme-secrets-scan.yml" -> "loopme/secrets/.github/workflows/loopme-secrets-scan.yml@main" : workflow was not found. See https://docs.github.com/actions/learn-github-actions/reusing-workflows#access-to-reusable-workflows for more information.
secrets:
GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }}
SECRETS_SCAN_APP_ID_GITHUB: ${{ secrets.SECRETS_SCAN_APP_ID_GITHUB }}
SECRETS_SCAN_APP_PRIVATE_KEY_GITHUB: ${{ secrets.SECRETS_SCAN_APP_PRIVATE_KEY_GITHUB }}
# Optional inputs — uncomment to customise:
# with:
# config-file: .gitleaks.toml # path to repo-local config (default: .gitleaks.toml)
# notify-user-list: "@user1,@user2" # GitHub users to @-mention in PR comments
# extra-arguments: "--verbose" # any extra gitleaks flags
# enable-comments: true # set to false to suppress inline PR comments (check still fails)