This repository has been archived by the owner on Dec 18, 2024. It is now read-only.

Merge pull request #504 from MeasureAuthoringTool/MAT-6473_upateCqmEx… #2721

	name: Github Secrets Scanner

	on: [push]

	jobs:
	gitleaks_scan:
	runs-on: ubuntu-latest
	env:
	REPO: https://github.com/MeasureAuthoringTool/madie-patient
	REMOTE_EXCLUDES_URL: https://raw.githubusercontent.com/semanticbits/bmat-gitleaks-automation/master/madie-patient/gitleaks.toml
	GITLEAKS_VERSION: v7.5.0
	steps:
	- name: Execute Gitleaks
	run: \|
	wget ${REMOTE_EXCLUDES_URL} -O gitleaks.toml
	wget https://github.com/zricethezav/gitleaks/releases/download/${GITLEAKS_VERSION}/gitleaks-linux-amd64 -O gitleaks
	chmod +x gitleaks
	echo ${GITHUB_SHA}
	echo "gitleaks --repo-url=${REPO} -v --redact --commit=${GITHUB_SHA} --config-path=gitleaks.toml"
	./gitleaks --repo-url=${REPO} -v --redact --commit=${GITHUB_SHA} --config-path=gitleaks.toml
	- name: Slack notification
	if: failure()
	env:
	SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }}
	uses: Ilshidur/action-slack@master
	with:
	args: "Potential Secrets found in: https://github.com/{{ GITHUB_REPOSITORY }}/commit/{{ GITHUB_SHA }} Link to build with full gitleaks output: https://github.com/{{ GITHUB_REPOSITORY }}/commit/{{ GITHUB_SHA }}/checks"

Provide feedback