Merge in main for stable release being tested in Test, then deployed in production #78

	name: Secret Detection Workflow
	on:
	push:
	branches:
	- main
	pull_request:
	branches:
	- main

	jobs:
	secret-detection:
	runs-on: ubuntu-latest
	steps:
	-
	name: Checkout code
	uses: actions/checkout@v7
	-
	name: Install detect-secrets
	run: pip install detect-secrets~=1.5.0

	-
	name: Verify .secrets.baseline exists
	run: \|
	if [ ! -f .secrets.baseline ]; then
	echo "❌ No .secrets.baseline found." >&2
	echo "" >&2
	echo "Run the following locally, audit the results, then commit the baseline:" >&2
	echo " scripts/detect_secrets_baseline.sh scan" >&2
	echo " scripts/detect_secrets_baseline.sh audit" >&2
	exit 1
	fi
	echo "✅ .secrets.baseline found."

	-
	name: Scan repository for secrets
	run: scripts/detect_secrets_baseline.sh

Navigation Menu