Skip to content

Conversation

@cb-rohitsharma
Copy link
Contributor

@cb-rohitsharma cb-rohitsharma commented Apr 15, 2025

🛡️ Secret Scan Workflow Added

Summary:
This PR introduces a GitHub Actions workflow that automatically scans all pull requests for potential secrets (API keys, passwords, tokens, etc.).

What’s included:

  • New secret scanning workflow integrated into the CI pipeline.
  • Workflow is triggered on every pull request to ensure no sensitive data is committed.
  • Helps enforce security best practices across the repository.

Why:
To improve security posture by detecting accidental exposure of secrets early during the development lifecycle.

Notes:

  • No application code is affected.
  • The workflow can be extended in the future to notify specific teams or integrate with secret management tools.

@sonarqubecloud
Copy link

@cb-haripriyan cb-haripriyan merged commit 872ac82 into main Apr 16, 2025
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants