diff --git a/.github/workflows/gitleaks.yaml b/.github/workflows/gitleaks.yaml new file mode 100644 index 0000000..d030ad7 --- /dev/null +++ b/.github/workflows/gitleaks.yaml @@ -0,0 +1,28 @@ +name: Gitleaks Scan +on: + push: + branches: + -main + pull_request: + branches: ["main"] + +jobs: + gitleaks: + runs-on: ubuntu-latest + steps: + - name: Code checkout + uses: actions/checkout@v2 + + - name: Install GitLeaks + run: | + wget -q -o gitleaks.tar.gz "https://github.com/gitleaks/gitleaks/releases/download/v8.18.0/gitleaks_8.18.0_linux_x64.tar.gz" \ + ls -l + tar -xzvf gitleaks.tar.gz + chmod +x gitleaks + sudo mv gitleaks /usr/local/bin/ + + - name: Run GitLeaks + run: | + gitleaks detect --readact + + diff --git a/Dockerfile b/Dockerfile index 250aaff..81fe1c4 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ FROM openjdk:8 -EXPOSE 8080 +EXPOSE 8081 ADD target/devops-integration.jar devops-integration.jar -ENTRYPOINT ["java","-jar","/devops-integration.jar"] \ No newline at end of file +ENTRYPOINT ["java","-jar","/devops-integration.jar"]