From 92ea0b9c6c793fe9e7228200ca16bed24f0c7b2f Mon Sep 17 00:00:00 2001 From: cvaidas Date: Mon, 14 Apr 2025 13:02:45 +0300 Subject: [PATCH 1/3] chore: add secrets scanning --- .github/secrets-scanning.yml | 13 +++++++++++ .gitleaksignore | 42 ++++++++++++++++++++++++++++++++++++ .pre-commit-config.yaml | 5 +++++ 3 files changed, 60 insertions(+) create mode 100644 .github/secrets-scanning.yml create mode 100644 .gitleaksignore create mode 100644 .pre-commit-config.yaml diff --git a/.github/secrets-scanning.yml b/.github/secrets-scanning.yml new file mode 100644 index 0000000..f6c2a19 --- /dev/null +++ b/.github/secrets-scanning.yml @@ -0,0 +1,13 @@ +name: Detect Secrets +on: + pull_request: + push: + workflow_dispatch: +jobs: + secrets-scan: + uses: probely/snyk-prodsec/.github/workflows/secrets-scanning.yml@main + with: + channel: probely-alerts + secrets: + SLACK_BOT_TOKEN: ${{ secrets.SLACK_SECRET }} + GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }} diff --git a/.gitleaksignore b/.gitleaksignore new file mode 100644 index 0000000..aa32f9c --- /dev/null +++ b/.gitleaksignore @@ -0,0 +1,42 @@ +4053f1f016e4913dc51020b0d50e670ab269f4f7:tests/conftest.py:generic-api-key:62 +eb61f24f49aa0a514fa099f98be282e936d7e380:probely_cli/settings.py:jwt:7 +eb61f24f49aa0a514fa099f98be282e936d7e380:probely_cli/settings.py:generic-api-key:1 +3aea90ee444896a553f4a504b2ec06dc8d291d10:tests/testable_api_responses.py:generic-api-key:2336 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:1668 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:1811 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:1927 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:2029 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:2135 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:2251 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:2353 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:2455 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:2557 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:2659 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:2761 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:2863 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:2965 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:3067 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:3169 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:3274 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:3384 +acfc613b52b2df3e575d7391b08f533d04c73f6b:tests/testable_api_responses.py:generic-api-key:3502 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:52 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:195 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:311 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:413 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:519 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:635 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:737 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:839 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:941 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:1043 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:1145 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:1247 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:1349 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:1451 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:1553 +f62498e58518258b5845d6a5e5af9867f3efc112:tests/testable_api_responses.py:generic-api-key:1665 +836abf1c20d4230f5ebb1cdcf74744cafa76b724:tests/testable_api_responses.py:generic-api-key:1900 +836abf1c20d4230f5ebb1cdcf74744cafa76b724:tests/testable_api_responses.py:generic-api-key:2033 +836abf1c20d4230f5ebb1cdcf74744cafa76b724:tests/testable_api_responses.py:generic-api-key:2131 +836abf1c20d4230f5ebb1cdcf74744cafa76b724:tests/testable_api_responses.py:generic-api-key:2229 diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml new file mode 100644 index 0000000..b8a004b --- /dev/null +++ b/.pre-commit-config.yaml @@ -0,0 +1,5 @@ +repos: + - repo: https://github.com/gitleaks/gitleaks + rev: v8.24.2 + hooks: + - id: gitleaks From 4018d880ce44586132d891652cc161ea406f3c10 Mon Sep 17 00:00:00 2001 From: cvaidas Date: Mon, 14 Apr 2025 16:22:55 +0300 Subject: [PATCH 2/3] chore: add secrets scanning --- .github/workflows/secrets-scanning.yml | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 .github/workflows/secrets-scanning.yml diff --git a/.github/workflows/secrets-scanning.yml b/.github/workflows/secrets-scanning.yml new file mode 100644 index 0000000..f6c2a19 --- /dev/null +++ b/.github/workflows/secrets-scanning.yml @@ -0,0 +1,13 @@ +name: Detect Secrets +on: + pull_request: + push: + workflow_dispatch: +jobs: + secrets-scan: + uses: probely/snyk-prodsec/.github/workflows/secrets-scanning.yml@main + with: + channel: probely-alerts + secrets: + SLACK_BOT_TOKEN: ${{ secrets.SLACK_SECRET }} + GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }} From 018e86959ababda6d857e636c16eca3029951cac Mon Sep 17 00:00:00 2001 From: cvaidas Date: Mon, 14 Apr 2025 16:30:41 +0300 Subject: [PATCH 3/3] chore: add secrets scanning --- .github/secrets-scanning.yml | 13 ------------- 1 file changed, 13 deletions(-) delete mode 100644 .github/secrets-scanning.yml diff --git a/.github/secrets-scanning.yml b/.github/secrets-scanning.yml deleted file mode 100644 index f6c2a19..0000000 --- a/.github/secrets-scanning.yml +++ /dev/null @@ -1,13 +0,0 @@ -name: Detect Secrets -on: - pull_request: - push: - workflow_dispatch: -jobs: - secrets-scan: - uses: probely/snyk-prodsec/.github/workflows/secrets-scanning.yml@main - with: - channel: probely-alerts - secrets: - SLACK_BOT_TOKEN: ${{ secrets.SLACK_SECRET }} - GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE }}