From ba1a30e93ea96b00363c7a756f40c05f42af8a9f Mon Sep 17 00:00:00 2001 From: Otieno Calvine Date: Fri, 13 Aug 2021 15:52:13 +0300 Subject: [PATCH] feat: integrate gitguardian security check Signed-off-by: Otieno Calvine --- .github/workflows/gitguardian.yaml | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 .github/workflows/gitguardian.yaml diff --git a/.github/workflows/gitguardian.yaml b/.github/workflows/gitguardian.yaml new file mode 100644 index 0000000..5cb46c2 --- /dev/null +++ b/.github/workflows/gitguardian.yaml @@ -0,0 +1,21 @@ +name: GitGuardian scan + +on: [push, pull_request] + +jobs: + scanning: + name: GitGuardian scan + runs-on: ubuntu-latest + steps: + - name: Checkout + uses: actions/checkout@v2 + with: + fetch-depth: 0 # fetch all history so multiple commits can be scanned + - name: GitGuardian scan + uses: GitGuardian/gg-shield-action@master + env: + GITHUB_PUSH_BEFORE_SHA: ${{ github.event.before }} + GITHUB_PUSH_BASE_SHA: ${{ github.event.base }} + GITHUB_PULL_BASE_SHA: ${{ github.event.pull_request.base.sha }} + GITHUB_DEFAULT_BRANCH: ${{ github.event.repository.default_branch }} + GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }} \ No newline at end of file