Skip to content

feat: RND-118: YOLO for TimelineLabels #89

feat: RND-118: YOLO for TimelineLabels

feat: RND-118: YOLO for TimelineLabels #89

Workflow file for this run

name: "Gitleaks"
on:
pull_request:
env:
GIT_GITLEAKS_VERSION: 8.18.4
ACTIONS_STEP_DEBUG: '${{ secrets.ACTIONS_STEP_DEBUG }}'
jobs:
gitleaks:
name: "Gitleaks"
runs-on: ubuntu-latest
steps:
- uses: hmarr/[email protected]
- name: Configure gitleaks binary cache
id: cache
uses: actions/cache@v4
with:
path: /usr/local/bin/gitleaks
key: gitleaks-${{ env.GIT_GITLEAKS_VERSION }}
- name: Install tools
if: steps.cache.outputs.cache-hit != 'true'
run: |
wget -O - \
"https://github.com/zricethezav/gitleaks/releases/download/v${{ env.GIT_GITLEAKS_VERSION }}/gitleaks_${{ env.GIT_GITLEAKS_VERSION }}_linux_x64.tar.gz" \
| sudo tar xzf - -C /usr/local/bin
- name: Checkout
uses: actions/checkout@v4
with:
fetch-depth: 0
ref: ${{ github.event.pull_request.head.sha || github.event.after }}
- name: Run gitleaks
run: |
set -euo pipefail ${ACTIONS_STEP_DEBUG:+-x}
gitleaks \
detect \
--source="." \
--redact \
-v \
--exit-code=2 \
--report-format=sarif \
--report-path=results.sarif \
--log-level=debug \
--log-opts='${{ github.event.pull_request.base.sha || github.event.before }}..${{ github.event.pull_request.head.sha || github.event.after }}'
- name: Upload test results
if: failure()
uses: actions/upload-artifact@v4
with:
name: GitLeaks results
path: results.sarif