---
name: Secrets Scan
# Disabled — requires GITLEAKS_LICENSE secret.
# To enable, uncomment the push/pull_request triggers and configure the secret.
"on":
# push:
# pull_request:
workflow_dispatch:
permissions:
contents: read
jobs:
gitleaks:
name: Scan for Secrets
runs-on: ubuntu-latest
steps:
- name: Checkout repository
# v6.0.2
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
fetch-depth: 0
- name: Run Gitleaks
# master
uses: gitleaks/gitleaks-action@bcfb9cce635345aac9996cedc19b2de8e01b894f
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }}