Add git secrets workflow (#3104)

aws · Dec 15, 2021 · f05e620 · f05e620
1 parent 21cf3fb
commit f05e620
Show file tree

Hide file tree

Showing 2 changed files with 24 additions and 0 deletions.
diff --git a/.gitallowed b/.gitallowed
@@ -0,0 +1 @@
+012345678901
diff --git a/.github/workflows/gitsecrets.yml b/.github/workflows/gitsecrets.yml
@@ -0,0 +1,23 @@
+name: GitSecretsScan
+
+on: [push, pull_request]
+
+jobs:
+  git-secret-check:
+    name: Git Secrets Scan
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+        with:
+          path: src/github.com/aws/amazon-ecs-agent
+      - name: Git Secrets Scan Script
+        run: |
+          set -ex
+          cd $GITHUB_WORKSPACE
+          git clone https://github.com/awslabs/git-secrets.git && cd git-secrets
+          sudo make install
+          git secrets --register-aws --global
+          cd $GITHUB_WORKSPACE/src/github.com/aws/amazon-ecs-agent
+          git secrets --install
+          git secrets --register-aws
+          git secrets --scan-history