chore: add secets scanning

snyk · Jul 11, 2023 · c4746e9 · c4746e9
1 parent edc7f7e
commit c4746e9
Show file tree

Hide file tree

Showing 4 changed files with 20 additions and 0 deletions.
diff --git a/.circleci/config.yml b/.circleci/config.yml
@@ -1014,6 +1014,7 @@ orbs:
     azure-cli: circleci/azure-cli@1.2.0
     redhat-openshift: circleci/redhat-openshift@0.2.0
     snyk: snyk/snyk@1.1.2
+    prodsec: snyk/prodsec-orb@1.0
 staging_branch_only_filter:
     filters:
         branches:
@@ -1079,6 +1080,17 @@ workflows:
                     - tag_and_push
     PR_TO_STAGING:
         jobs:
+            - prodsec/secrets-scan:
+                name: Scan repository for secrets
+                context:
+                    - snyk-bot-slack
+                channel: container-integration-alerts
+                filters:
+                    branches:
+                        ignore:
+                            - staging
+                            - master
+
             - build_image:
                 filters:
                     branches:

diff --git a/.circleci/config/orbs/@prodsec.yml b/.circleci/config/orbs/@prodsec.yml
@@ -0,0 +1 @@
+prodsec: snyk/prodsec-orb@1.0
diff --git a/.gitleaksignore b/.gitleaksignore
@@ -0,0 +1,2 @@
+5b9a7821680bbfb6c4a900ab05d898ce2b2cc157:test/common/config.spec.ts:generic-api-key:2
+ce1cf363e4ec4546f3d73d57727ac564308c3f7e:test/README-OPENSHIFT4.md:generic-api-key:13
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -0,0 +1,5 @@
+repos:
+  - repo: https://github.com/gitleaks/gitleaks
+    rev: v8.16.2
+    hooks:
+      - id: gitleaks