From 14356875283f3348d414b85a864e29cf1d2bc9e0 Mon Sep 17 00:00:00 2001 From: cvaidas Date: Tue, 8 Apr 2025 11:37:01 +0300 Subject: [PATCH 1/2] chore: add secret scanning --- .github/workflows/secrets-scanning.yml | 0 .pre-commit-config.yaml | 14 ++++++++++++++ 2 files changed, 14 insertions(+) create mode 100644 .github/workflows/secrets-scanning.yml create mode 100644 .pre-commit-config.yaml diff --git a/.github/workflows/secrets-scanning.yml b/.github/workflows/secrets-scanning.yml new file mode 100644 index 0000000..e69de29 diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml new file mode 100644 index 0000000..cca0d62 --- /dev/null +++ b/.pre-commit-config.yaml @@ -0,0 +1,14 @@ +# See https://pre-commit.com for more information +# See https://pre-commit.com/hooks.html for more hooks +repos: + - repo: https://github.com/pre-commit/pre-commit-hooks + rev: v3.2.0 + hooks: + - id: trailing-whitespace + - id: end-of-file-fixer + - id: check-yaml + - id: check-added-large-files + - repo: https://github.com/gitleaks/gitleaks + rev: v8.22.0 + hooks: + - id: gitleaks From 6b1747817742e6c322f4cd908c1554cf947da67f Mon Sep 17 00:00:00 2001 From: cvaidas Date: Tue, 8 Apr 2025 11:43:44 +0300 Subject: [PATCH 2/2] chore: add slack channel --- .github/workflows/secrets-scanning.yml | 13 +++++++++++++ catalog-info.yaml | 2 +- 2 files changed, 14 insertions(+), 1 deletion(-) diff --git a/.github/workflows/secrets-scanning.yml b/.github/workflows/secrets-scanning.yml index e69de29..f6c2a19 100644 --- a/.github/workflows/secrets-scanning.yml +++ b/.github/workflows/secrets-scanning.yml @@ -0,0 +1,13 @@ +name: Detect Secrets +on: + pull_request: + push: + workflow_dispatch: +jobs: + secrets-scan: + uses: probely/snyk-prodsec/.github/workflows/secrets-scanning.yml@main + with: + channel: probely-alerts + secrets: + SLACK_BOT_TOKEN: ${{ secrets.SLACK_SECRET }} + GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }} diff --git a/catalog-info.yaml b/catalog-info.yaml index fa4a911..cfa3752 100644 --- a/catalog-info.yaml +++ b/catalog-info.yaml @@ -5,4 +5,4 @@ metadata: spec: type: examples lifecycle: "-" - owner: probely-backend \ No newline at end of file + owner: probely-backend