Skip to content

Commit db4ee60

Browse files
authored
Adding AWS secrets keys exposure scanning tool
1 parent f476c6c commit db4ee60

File tree

1 file changed

+33
-0
lines changed

1 file changed

+33
-0
lines changed

.github/workflows/main.yml

+33
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,33 @@
1+
name: git-secrets
2+
3+
# Controls when the workflow will run
4+
# Triggers the workflow on push or pull request events but only for the main branch
5+
on: [push]
6+
7+
# A workflow run is made up of one or more jobs that can run sequentially or in parallel
8+
jobs:
9+
# This workflow contains a single job called "main"
10+
git-secrets:
11+
# The type of runner that the job will run on
12+
runs-on: ubuntu-18.04
13+
14+
# Steps represent a sequence of tasks that will be executed as part of the job
15+
steps:
16+
- name: Check Out Source Code
17+
uses: actions/checkout@v2
18+
19+
- name: Set up Python 3.8
20+
uses: actions/setup-python@v2
21+
with:
22+
python-version: 3.8
23+
- name: Installing dependencies
24+
run:
25+
sudo apt-get install git less openssh-server
26+
- name: Installing scanning tool
27+
run: |
28+
brew install git-secrets
29+
git secrets --install
30+
git secrets --register-aws
31+
- name: Running scanning tool
32+
run:
33+
git secrets --scan

0 commit comments

Comments
 (0)