diff --git a/.github/workflows/ggshield-action.yml b/.github/workflows/ggshield-action.yml new file mode 100644 index 0000000..271108c --- /dev/null +++ b/.github/workflows/ggshield-action.yml @@ -0,0 +1,20 @@ +name: GitGuardian scan + +on: [push, pull_request] + +jobs: + scanning: + name: GitGuardian scan + runs-on: ubuntu-latest + steps: + - name: Checkout + uses: actions/checkout@v4 + with: + fetch-depth: 0 # fetch all history so multiple commits can be scanned + - name: GitGuardian scan + uses: GitGuardian/ggshield-action@v1.28.0 + env: + GITHUB_PUSH_BEFORE_SHA: ${{ github.event.before }} + GITHUB_PUSH_BASE_SHA: ${{ github.event.base }} + GITHUB_DEFAULT_BRANCH: ${{ github.event.repository.default_branch }} + GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }} \ No newline at end of file diff --git a/.github/workflows/trufflehogoss.yml b/.github/workflows/trufflehogoss.yml deleted file mode 100644 index ca43167..0000000 --- a/.github/workflows/trufflehogoss.yml +++ /dev/null @@ -1,2 +0,0 @@ -- name: TruffleHog OSS - uses: trufflesecurity/trufflehog@v3.78.1