RYM
/
Rym_Infrastructure
1
0
Fork 0
Code Issues Pull Requests 2 Actions Packages Projects Releases Wiki Activity

fix(ci): use free gitleaks docker image
DevSecOps Pipeline - V1 Infrastructure / System & Environment Check (push) Successful in 0s Details
DevSecOps Pipeline - V1 Infrastructure / Secret Detection (Gitleaks) (push) Failing after 11s Details 

Switch from gitleaks-action to zricethezav/gitleaks docker image to bypass commercial license requirements.
This commit is contained in:
Marc Lasserre 2026-08-06 23:45:33 +02:00
parent 5eacabb167
commit 087aa6f8db
Signed by: M7s
GPG Key ID: F74837410959661B
1 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
.gitea/workflows/test-ci.yml
View File

@ -16,13 +16,14 @@ jobs:
gitleaks-scan: gitleaks-scan:
name: Secret Detection (Gitleaks) name: Secret Detection (Gitleaks)
runs-on: ubuntu-latest runs-on: ubuntu-latest
container:
image: zricethezav/gitleaks:latest
steps: steps:
- name: Check Out Code - name: Check Out Code
uses: actions/checkout@v3 uses: actions/checkout@v3
with: with:
fetch-depth: 0 fetch-depth: 0
- name: Run Gitleaks - name: Run Gitleaks Scan
uses: gitleaks/gitleaks-action@v2 run: |
env: gitleaks detect --source . -v
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}