Skip to content

chore: rebrand project to realtime-dual-transcriber #2

chore: rebrand project to realtime-dual-transcriber

chore: rebrand project to realtime-dual-transcriber #2

Workflow file for this run

name: Secret scan
on:
push:
pull_request:
jobs:
secret-scan:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Scan for common API key patterns
shell: bash
run: |
set -euo pipefail
patterns=(
'gsk_[A-Za-z0-9]{20,}'
'sk-[A-Za-z0-9]{20,}'
'sk-proj-[A-Za-z0-9_-]{20,}'
'ghp_[A-Za-z0-9]{20,}'
'github_pat_[A-Za-z0-9_]{20,}'
'AKIA[0-9A-Z]{16}'
'AIza[0-9A-Za-z_-]{35}'
)
found=0
for pattern in "${patterns[@]}"; do
if git grep -nIE "$pattern" -- . \
':!.git/**' \
':!.github/workflows/secret-scan.yml'; then
found=1
fi
done
if [ "$found" -ne 0 ]; then
echo "Potential secret detected. Remove it from committed files before pushing."
exit 1
fi