Skip to content

Merge pull request #1732 from sbadakhc/issue-1730/release-v1-1-50 #191

Merge pull request #1732 from sbadakhc/issue-1730/release-v1-1-50

Merge pull request #1732 from sbadakhc/issue-1730/release-v1-1-50 #191

Workflow file for this run

name: Security Checks
on:
push:
branches:
- main
- dev
pull_request:
branches:
- main
- dev
schedule:
- cron: '0 3 * * 1'
permissions:
contents: read
security-events: write
actions: read
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
jobs:
shellcheck:
name: Shell Script Linting
runs-on: ubuntu-latest
timeout-minutes: 20
steps:
- name: Checkout repository
uses: actions/checkout@v7.0.0
- name: Run ShellCheck
uses: ludeeus/action-shellcheck@00cae500b08a931fb5698e11e79bfbd38e612a38 # 2.0.0
env:
SHELLCHECK_OPTS: --severity=warning --exclude=SC1091
with:
scandir: '.'
gitleaks:
name: Secret Scanning
runs-on: ubuntu-latest
timeout-minutes: 10
steps:
- name: Checkout repository
uses: actions/checkout@v7.0.0
with:
fetch-depth: 1
- name: Install gitleaks
run: |
GITLEAKS_VERSION="8.30.1"
curl -sSfL \
"https://github.com/gitleaks/gitleaks/releases/download/v${GITLEAKS_VERSION}/gitleaks_${GITLEAKS_VERSION}_linux_x64.tar.gz" \
| tar -xz -C /usr/local/bin gitleaks
gitleaks version
- name: Run gitleaks
run: gitleaks detect --source . --config .gitleaks.toml --verbose