tiberius 0.13.0

A TDS (MSSQL) driver
Documentation
name: PR Code Security

on:
  pull_request:
    branches: [main]

permissions:
  contents: read

jobs:
  secret-detection:
    name: Secret Detection
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          # Full history so gitleaks can scan every commit in the PR range.
          fetch-depth: 0
          persist-credentials: false
      # We run the gitleaks CLI directly rather than gitleaks-action: the
      # action wrapper requires a paid license for repos under a GitHub
      # organization, while the gitleaks binary itself is MIT-licensed and
      # free. Pinned by version and verified by SHA-256 before use.
      - name: Install gitleaks
        env:
          GITLEAKS_VERSION: 8.30.1
          GITLEAKS_SHA256: 551f6fc83ea457d62a0d98237cbad105af8d557003051f41f3e7ca7b3f2470eb
        run: |
          set -euo pipefail
          url="https://github.com/gitleaks/gitleaks/releases/download/v${GITLEAKS_VERSION}/gitleaks_${GITLEAKS_VERSION}_linux_x64.tar.gz"
          curl -sSfL "$url" -o gitleaks.tar.gz
          echo "${GITLEAKS_SHA256}  gitleaks.tar.gz" | sha256sum -c -
          tar -xzf gitleaks.tar.gz gitleaks
          sudo install gitleaks /usr/local/bin/gitleaks
          gitleaks version
      - name: Scan git history for secrets
        run: gitleaks git --no-banner --redact --exit-code 1 --config .gitleaks.toml .