From 6ef646cc68c18c704c3c62e1124720fe4fd9b484 Mon Sep 17 00:00:00 2001 From: cvaidas Date: Tue, 8 Apr 2025 16:16:19 +0300 Subject: [PATCH 1/4] chore: add secrets scanning --- .github/secrets-scanning.yml | 13 +++++++++++++ .gitleaksignore | 0 .pre-commit-config.yaml | 5 +++++ 3 files changed, 18 insertions(+) create mode 100644 .github/secrets-scanning.yml create mode 100644 .gitleaksignore create mode 100644 .pre-commit-config.yaml diff --git a/.github/secrets-scanning.yml b/.github/secrets-scanning.yml new file mode 100644 index 0000000..f6c2a19 --- /dev/null +++ b/.github/secrets-scanning.yml @@ -0,0 +1,13 @@ +name: Detect Secrets +on: + pull_request: + push: + workflow_dispatch: +jobs: + secrets-scan: + uses: probely/snyk-prodsec/.github/workflows/secrets-scanning.yml@main + with: + channel: probely-alerts + secrets: + SLACK_BOT_TOKEN: ${{ secrets.SLACK_SECRET }} + GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }} diff --git a/.gitleaksignore b/.gitleaksignore new file mode 100644 index 0000000..e69de29 diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml new file mode 100644 index 0000000..79c84ca --- /dev/null +++ b/.pre-commit-config.yaml @@ -0,0 +1,5 @@ +repos: + - repo: https://github.com/gitleaks/gitleaks + rev: v8.16.2 + hooks: + - id: gitleaks From e6f343810eff45e43083e63f1df38ab6f471e4ff Mon Sep 17 00:00:00 2001 From: cvaidas Date: Tue, 8 Apr 2025 16:26:08 +0300 Subject: [PATCH 2/4] chore: add secrets scanning --- .pre-commit-config.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 79c84ca..b8a004b 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -1,5 +1,5 @@ repos: - repo: https://github.com/gitleaks/gitleaks - rev: v8.16.2 + rev: v8.24.2 hooks: - id: gitleaks From d1089df6578ef416fc91d56edd47d51da5a5091e Mon Sep 17 00:00:00 2001 From: cvaidas Date: Tue, 8 Apr 2025 16:39:48 +0300 Subject: [PATCH 3/4] chore: add secrets scanning --- .github/workflows/secrets-scanning.yml | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 .github/workflows/secrets-scanning.yml diff --git a/.github/workflows/secrets-scanning.yml b/.github/workflows/secrets-scanning.yml new file mode 100644 index 0000000..f6c2a19 --- /dev/null +++ b/.github/workflows/secrets-scanning.yml @@ -0,0 +1,13 @@ +name: Detect Secrets +on: + pull_request: + push: + workflow_dispatch: +jobs: + secrets-scan: + uses: probely/snyk-prodsec/.github/workflows/secrets-scanning.yml@main + with: + channel: probely-alerts + secrets: + SLACK_BOT_TOKEN: ${{ secrets.SLACK_SECRET }} + GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }} From fc3bd2314fb038f34460622fc59ce418ed5fce02 Mon Sep 17 00:00:00 2001 From: cvaidas Date: Tue, 8 Apr 2025 16:50:28 +0300 Subject: [PATCH 4/4] chore: add secrets scanning --- .github/secrets-scanning.yml | 13 ------------- 1 file changed, 13 deletions(-) delete mode 100644 .github/secrets-scanning.yml diff --git a/.github/secrets-scanning.yml b/.github/secrets-scanning.yml deleted file mode 100644 index f6c2a19..0000000 --- a/.github/secrets-scanning.yml +++ /dev/null @@ -1,13 +0,0 @@ -name: Detect Secrets -on: - pull_request: - push: - workflow_dispatch: -jobs: - secrets-scan: - uses: probely/snyk-prodsec/.github/workflows/secrets-scanning.yml@main - with: - channel: probely-alerts - secrets: - SLACK_BOT_TOKEN: ${{ secrets.SLACK_SECRET }} - GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }}