From 367fcf851c89ac3b22a3f92dbbce86f3d7489bc6 Mon Sep 17 00:00:00 2001 From: acidburnmonkey Date: Sun, 6 Jul 2025 20:16:44 -0400 Subject: [PATCH 1/4] gitleaks --- .github/workflows/scaner.yml | 23 ++++++++--------------- 1 file changed, 8 insertions(+), 15 deletions(-) diff --git a/.github/workflows/scaner.yml b/.github/workflows/scaner.yml index 3fe50e5..baca755 100644 --- a/.github/workflows/scaner.yml +++ b/.github/workflows/scaner.yml @@ -1,20 +1,13 @@ -name: TruffleHog OSS - -on: - push: - branches: - - master - pull_request: - +name: gitleaks +on: [pull_request, push, workflow_dispatch] jobs: - test: + scan: + name: gitleaks runs-on: ubuntu-latest steps: - - name: Checkout code - uses: actions/checkout@v4 + - uses: actions/checkout@v3 with: fetch-depth: 0 - - name: Secret Scanning - uses: trufflesecurity/trufflehog@main - with: - extra_args: --results=verified,unknown + - uses: gitleaks/gitleaks-action@v2 + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} From a1a688a1605b191c33438daa8a579b64c38bd576 Mon Sep 17 00:00:00 2001 From: acidburnmonkey Date: Sun, 6 Jul 2025 20:44:41 -0400 Subject: [PATCH 2/4] tea --- .github/workflows/scaner.yml | 17 ++++++++++++++++- 1 file changed, 16 insertions(+), 1 deletion(-) diff --git a/.github/workflows/scaner.yml b/.github/workflows/scaner.yml index baca755..9d88824 100644 --- a/.github/workflows/scaner.yml +++ b/.github/workflows/scaner.yml @@ -10,4 +10,19 @@ jobs: fetch-depth: 0 - uses: gitleaks/gitleaks-action@v2 env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }} + +name: Security audit +on: + push: + paths: + - '**/Cargo.toml' + - '**/Cargo.lock' +jobs: + security_audit: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v1 + - uses: actions-rs/audit-check@v1 + with: + token: ${{ secrets.GITEA_TOKEN }} From 6e053a3dca457eea8fefcbaa480dd988b863960f Mon Sep 17 00:00:00 2001 From: acidburnmonkey Date: Sun, 6 Jul 2025 20:46:53 -0400 Subject: [PATCH 3/4] z --- .github/workflows/rustScaner.yml | 14 ++++++++++++++ .github/workflows/scaner.yml | 15 --------------- 2 files changed, 14 insertions(+), 15 deletions(-) create mode 100644 .github/workflows/rustScaner.yml diff --git a/.github/workflows/rustScaner.yml b/.github/workflows/rustScaner.yml new file mode 100644 index 0000000..dc9418b --- /dev/null +++ b/.github/workflows/rustScaner.yml @@ -0,0 +1,14 @@ +name: Security audit +on: + push: + paths: + - '**/Cargo.toml' + - '**/Cargo.lock' +jobs: + security_audit: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v1 + - uses: actions-rs/audit-check@v1 + with: + token: ${{ secrets.GITEA_TOKEN }} diff --git a/.github/workflows/scaner.yml b/.github/workflows/scaner.yml index 9d88824..ebc5ef9 100644 --- a/.github/workflows/scaner.yml +++ b/.github/workflows/scaner.yml @@ -11,18 +11,3 @@ jobs: - uses: gitleaks/gitleaks-action@v2 env: GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }} - -name: Security audit -on: - push: - paths: - - '**/Cargo.toml' - - '**/Cargo.lock' -jobs: - security_audit: - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v1 - - uses: actions-rs/audit-check@v1 - with: - token: ${{ secrets.GITEA_TOKEN }} From 8ab6c3e1dc726a471d9aa3f46b30db0c59c8222c Mon Sep 17 00:00:00 2001 From: mahalo Date: Mon, 7 Jul 2025 00:53:39 +0000 Subject: [PATCH 4/4] Update .github/workflows/scaner.yml --- .github/workflows/scaner.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/scaner.yml b/.github/workflows/scaner.yml index ebc5ef9..d993e16 100644 --- a/.github/workflows/scaner.yml +++ b/.github/workflows/scaner.yml @@ -8,6 +8,6 @@ jobs: - uses: actions/checkout@v3 with: fetch-depth: 0 - - uses: gitleaks/gitleaks-action@v2 + - uses: gitleaks/gitleaks-action@v1 env: GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}