diff --git a/.github/workflows/eol-outdated-js-scan.yml b/.github/workflows/eol-outdated-js-scan.yml deleted file mode 100644 index 3d44205..0000000 --- a/.github/workflows/eol-outdated-js-scan.yml +++ /dev/null @@ -1,20 +0,0 @@ -name: End of Life and Outdated JS Scan - -on: - pull_request: - branches: [master] - types: [opened, synchronize, reopened, ready_for_review] - -concurrency: - group: ${{ github.workflow }}-${{ github.ref }} - cancel-in-progress: true - -jobs: - call-eol-scan: - if: ${{ github.event.pull_request.draft == false }} - uses: fylein/workflows/.github/workflows/eol-outdated-js-scan.yml@master - with: - npm-run-cmd: 'npm ci' - secrets: - github-token: ${{ secrets.GITHUB_TOKEN }} - nvd-api-key: ${{ secrets.NVD_API_KEY }} diff --git a/.github/workflows/secrets-scan.yml b/.github/workflows/secrets-scan.yml new file mode 100644 index 0000000..5310da2 --- /dev/null +++ b/.github/workflows/secrets-scan.yml @@ -0,0 +1,26 @@ +name: Secrets Scan + +on: + pull_request: + types: [opened, synchronize, reopened] + branches: + - master + push: + branches: + - master + +jobs: + secrets-scan: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + with: + fetch-depth: 0 + + - uses: gitleaks/gitleaks-action@v2 + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE_KEY }} + GITLEAKS_NOTIFY_USER_LIST: ${{ vars.GITLEAKS_NOTIFY_USER_LIST }} + GITLEAKS_ENABLE_COMMENTS: 'true' + GITLEAKS_ENABLE_UPLOAD_ARTIFACT: 'false' \ No newline at end of file