diff --git a/.github/workflows/secrets-scanning.yml b/.github/workflows/secrets-scanning.yml new file mode 100644 index 0000000..f6c2a19 --- /dev/null +++ b/.github/workflows/secrets-scanning.yml @@ -0,0 +1,13 @@ +name: Detect Secrets +on: + pull_request: + push: + workflow_dispatch: +jobs: + secrets-scan: + uses: probely/snyk-prodsec/.github/workflows/secrets-scanning.yml@main + with: + channel: probely-alerts + secrets: + SLACK_BOT_TOKEN: ${{ secrets.SLACK_SECRET }} + GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }} diff --git a/.gitleaksignore b/.gitleaksignore new file mode 100644 index 0000000..aa32f9c --- /dev/null +++ b/.gitleaksignore @@ -0,0 +1,42 @@ +4053f1f016e4913dc51020b0d50e670ab269f4f7:tests/conftest.py:generic-api-key:62 +eb61f24f49aa0a514fa099f98be282e936d7e380:probely_cli/settings.py:jwt:7 +eb61f24f49aa0a514fa099f98be282e936d7e380:probely_cli/settings.py:generic-api-key:1 +3aea90ee444896a553f4a504b2ec06dc8d291d10:tests/testable_api_responses.py:generic-api-key:2336 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:1668 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:1811 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:1927 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:2029 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:2135 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:2251 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:2353 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:2455 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:2557 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:2659 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:2761 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:2863 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:2965 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:3067 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:3169 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:3274 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:3384 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:3502 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:52 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:195 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:311 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:413 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:519 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:635 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:737 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:839 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:941 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:1043 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:1145 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:1247 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:1349 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:1451 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:1553 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:1665 +836abf1c20d4230f5ebb1cdcf74744cafa76b724:tests/testable_api_responses.py:generic-api-key:1900 +836abf1c20d4230f5ebb1cdcf74744cafa76b724:tests/testable_api_responses.py:generic-api-key:2033 +836abf1c20d4230f5ebb1cdcf74744cafa76b724:tests/testable_api_responses.py:generic-api-key:2131 +836abf1c20d4230f5ebb1cdcf74744cafa76b724:tests/testable_api_responses.py:generic-api-key:2229 diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml new file mode 100644 index 0000000..b8a004b --- /dev/null +++ b/.pre-commit-config.yaml @@ -0,0 +1,5 @@ +repos: + - repo: https://github.com/gitleaks/gitleaks + rev: v8.24.2 + hooks: + - id: gitleaks