CredSweeper/action.yml at main · babenek/CredSweeper · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
name: "CredSweeper action"
description: "CredSweeper checks files"
author: "r.babenko@samsung.com"
branding:
  icon: "terminal"
  color: "gray-dark"
inputs:
  python_version:
    description: "Python Version. 3.10 - default"
    default: "3.10"
    required: false
  path:
    description: "Path to scan"
    required: true
  report:
    description: "CredSweeper report in JSON format"
    default: "output.json"
    required: false
  hashed:
    description: "Report output is hashed by default"
    default: "--hashed"
    required: false
  error:
    description: "Exit with an error code if credentials are detected"
    default: "--error"
    required: false
runs:
  using: "composite"
  steps:
    - name: DEBUG
      shell: bash
      env:
        path: ${{ inputs.path }}
        report: ${{ inputs.report }}
        error: ${{ inputs.error }}
        hashed: ${{ inputs.hashed }}
      run: echo "print ('@@@ $error @@@ $report @@@ $path @@@ $PATH @@@')"

    - name: Setup Python
      uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0 - 2025.01.28
      with:
        python-version: ${{ inputs.python_version }}

    - name: Install CredSweeper
      shell: bash
      run: python -m pip install credsweeper

    - name: Run CredSweeper
      shell: bash
      env:
        path: ${{ inputs.path }}
        report: ${{ inputs.report }}
        error: ${{ inputs.error }}
        hashed: ${{ inputs.hashed }}
      run: python -m credsweeper --banner --log INFO --no-color --no-stdout "$error" "$hashed" --save-json "$report" --path "$path"