Repository navigation
v1.0.0
The repo is now valuecodes/maintain-kit, and secret scanning has its own reusable workflow, secret-scan.yml, which runs gitleaks at the version pinned here over the caller's full history. The dashboard and the update PRs no longer know about gitleaks: the gitleaks-script input, the gitleaks section and the gitleaks update kind are gone.
⚠ Breaking changes
GitHub does not redirect uses: references of a renamed repository, so every caller fails until it re-pins. In each caller:
- Change
uses:tovaluecodes/maintain-kit/.github/workflows/dashboard.yml@<sha>,updates.yml@<sha>andworkflow-lint.yml@<sha>, pinned to this release's commit. - Remove the
gitleaks-scriptinput if passed; an unknown input fails the call. - Add a
secret-scanjob that callssecret-scan.yml@<sha>withcontents: read, delete the repo's own gitleaks script, and run a local gitleaks in the pre-commit hook. - Name the caller jobs
maintain-kit-dashboardandmaintain-kit-updates(as in the README snippets), so the runs readmaintain-kit-dashboard / update-issueandmaintain-kit-updates / <kind>; the PR check issecret-scan / gitleaks. - Close the old "Maintenance dashboard" issue and the open
maintenance-updates/*PRs and delete those branches; the next run opens their replacements under the new label (maintain-kit-dashboard,maintain-kit-updates), branch (maintain-kit/<kind>) and marker.
Features
- Move secret scanning to its own workflow and rename the repo to maintain-kit by @valuecodes in #30
Full Changelog: v0.8.0...v1.0.0