From 4122a49978c93625f2f5fc757dca94677abf7362 Mon Sep 17 00:00:00 2001 From: cvaidas Date: Mon, 14 Apr 2025 13:02:55 +0300 Subject: [PATCH 1/3] chore: add secrets scanning --- .github/secrets-scanning.yml | 13 +++++++++++++ .gitleaksignore | 1 + .pre-commit-config.yaml | 5 +++++ 3 files changed, 19 insertions(+) create mode 100644 .github/secrets-scanning.yml create mode 100644 .gitleaksignore create mode 100644 .pre-commit-config.yaml diff --git a/.github/secrets-scanning.yml b/.github/secrets-scanning.yml new file mode 100644 index 0000000..f6c2a19 --- /dev/null +++ b/.github/secrets-scanning.yml @@ -0,0 +1,13 @@ +name: Detect Secrets +on: + pull_request: + push: + workflow_dispatch: +jobs: + secrets-scan: + uses: probely/snyk-prodsec/.github/workflows/secrets-scanning.yml@main + with: + channel: probely-alerts + secrets: + SLACK_BOT_TOKEN: ${{ secrets.SLACK_SECRET }} + GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }} diff --git a/.gitleaksignore b/.gitleaksignore new file mode 100644 index 0000000..2775b5a --- /dev/null +++ b/.gitleaksignore @@ -0,0 +1 @@ +2c42edda7ccdd54505b1913ca261a9c75d5387cd:docker/nginx/Dockerfile:generic-api-key:7 diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml new file mode 100644 index 0000000..b8a004b --- /dev/null +++ b/.pre-commit-config.yaml @@ -0,0 +1,5 @@ +repos: + - repo: https://github.com/gitleaks/gitleaks + rev: v8.24.2 + hooks: + - id: gitleaks From e2899742a639efcc2494bf2474a014fc8fe69ab9 Mon Sep 17 00:00:00 2001 From: cvaidas Date: Mon, 14 Apr 2025 16:23:05 +0300 Subject: [PATCH 2/3] chore: add secrets scanning --- .github/workflows/secrets-scanning.yml | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 .github/workflows/secrets-scanning.yml diff --git a/.github/workflows/secrets-scanning.yml b/.github/workflows/secrets-scanning.yml new file mode 100644 index 0000000..f6c2a19 --- /dev/null +++ b/.github/workflows/secrets-scanning.yml @@ -0,0 +1,13 @@ +name: Detect Secrets +on: + pull_request: + push: + workflow_dispatch: +jobs: + secrets-scan: + uses: probely/snyk-prodsec/.github/workflows/secrets-scanning.yml@main + with: + channel: probely-alerts + secrets: + SLACK_BOT_TOKEN: ${{ secrets.SLACK_SECRET }} + GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }} From b8d8ef11bbbeb92220b74a81f6a9bcfc00f40284 Mon Sep 17 00:00:00 2001 From: cvaidas Date: Mon, 14 Apr 2025 16:30:51 +0300 Subject: [PATCH 3/3] chore: add secrets scanning --- .github/secrets-scanning.yml | 13 ------------- 1 file changed, 13 deletions(-) delete mode 100644 .github/secrets-scanning.yml diff --git a/.github/secrets-scanning.yml b/.github/secrets-scanning.yml deleted file mode 100644 index f6c2a19..0000000 --- a/.github/secrets-scanning.yml +++ /dev/null @@ -1,13 +0,0 @@ -name: Detect Secrets -on: - pull_request: - push: - workflow_dispatch: -jobs: - secrets-scan: - uses: probely/snyk-prodsec/.github/workflows/secrets-scanning.yml@main - with: - channel: probely-alerts - secrets: - SLACK_BOT_TOKEN: ${{ secrets.SLACK_SECRET }} - GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }}