From 673f27332bae48089f67343663e1bcab588c6c02 Mon Sep 17 00:00:00 2001 From: akashkumarmg Date: Tue, 6 May 2025 12:25:55 +0530 Subject: [PATCH 1/2] Update and rename gitleaks-docker.yml to Gitleaks scan workflow call on PR.yml Updated the gitleaks workflow-call file from docker method to local download, install and scan method --- .../Gitleaks scan workflow call on PR.yml | 14 ++++++++++ .github/workflows/gitleaks-docker.yml | 28 ------------------- 2 files changed, 14 insertions(+), 28 deletions(-) create mode 100644 .github/workflows/Gitleaks scan workflow call on PR.yml delete mode 100644 .github/workflows/gitleaks-docker.yml diff --git a/.github/workflows/Gitleaks scan workflow call on PR.yml b/.github/workflows/Gitleaks scan workflow call on PR.yml new file mode 100644 index 0000000..ca1a62e --- /dev/null +++ b/.github/workflows/Gitleaks scan workflow call on PR.yml @@ -0,0 +1,14 @@ +name: Gitleaks scan workflow call on PR +on: + pull_request: + branches: + - main + +permissions: + issues: write + pull-requests: write + contents: read + +jobs: + call-gitleaks: + uses: SkyflowFoundry/.github/.github/workflows/Gitleaks Central workflow.yml@main diff --git a/.github/workflows/gitleaks-docker.yml b/.github/workflows/gitleaks-docker.yml deleted file mode 100644 index a563b2d..0000000 --- a/.github/workflows/gitleaks-docker.yml +++ /dev/null @@ -1,28 +0,0 @@ -name: gitleaks-docker - -on: - pull_request: - branches: - - main - -jobs: - build: - runs-on: ubuntu-latest - - steps: - - name: Checkout code - uses: actions/checkout@v3 - - - name: Run gitleaks-docker - run: | - docker pull zricethezav/gitleaks:latest - docker run \ - -v ${{ github.workspace }}:/repo \ - -e GITLEAKS_CONFIG=/repo/.github/gitleaks.toml \ - zricethezav/gitleaks:latest \ - detect --source=/repo --verbose --exit-code=0 -f=json > gitleaks-results.json - - - name: Display Gitleaks JSON Output - run: | - echo "Displaying Gitleaks results..." - cat gitleaks-results.json From bd7afa5422778b3d8248f7315c5cf962df2f2e41 Mon Sep 17 00:00:00 2001 From: akashkumarmg Date: Tue, 6 May 2025 12:42:42 +0530 Subject: [PATCH 2/2] Update Gitleaks scan workflow call on PR.yml updated with secrets: inherit --- .github/workflows/Gitleaks scan workflow call on PR.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/Gitleaks scan workflow call on PR.yml b/.github/workflows/Gitleaks scan workflow call on PR.yml index ca1a62e..c4d892f 100644 --- a/.github/workflows/Gitleaks scan workflow call on PR.yml +++ b/.github/workflows/Gitleaks scan workflow call on PR.yml @@ -12,3 +12,4 @@ permissions: jobs: call-gitleaks: uses: SkyflowFoundry/.github/.github/workflows/Gitleaks Central workflow.yml@main + secrets: inherit