fix(ci): use free gitleaks docker image
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 11s Details

Switch from gitleaks-action to zricethezav/gitleaks docker image to bypass commercial license requirements.
This commit is contained in:
Marc Lasserre 2026-08-06 23:45:33 +02:00
parent 5eacabb167
commit 087aa6f8db
Signed by: M7s
GPG Key ID: F74837410959661B
1 changed files with 5 additions and 4 deletions

View File

@ -16,13 +16,14 @@ jobs:
gitleaks-scan:
name: Secret Detection (Gitleaks)
runs-on: ubuntu-latest
container:
image: zricethezav/gitleaks:latest
steps:
- name: Check Out Code
uses: actions/checkout@v3
with:
fetch-depth: 0
- name: Run Gitleaks
uses: gitleaks/gitleaks-action@v2
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Run Gitleaks Scan
run: |
gitleaks detect --source . -v