| # Scan git repos (or files) for secrets using regex and entropy 🔑 | |
| name: gitLeaks | |
| on: | |
| push: | |
| branches: | |
| - master | |
| paths-ignore: | |
| - 'docs/**' | |
| pull_request: | |
| branches: | |
| - master | |
| paths-ignore: | |
| - 'docs/**' | |
| jobs: | |
| gitleaks: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v3 | |
| with: | |
| fetch-depth: '1' | |
| submodules: recursive | |
| - name: wget | |
| shell: bash | |
| run: | | |
| wget https://raw.githubusercontent.com/ycjcl868/gitleaks/master/.gitleaks.toml | |
| - name: gitleaks-action | |
| uses: ./.github/actions/gitleaks-action |