0dd219a068
DO-1390 Co-authored-by: denis.patrakeev <denis.patrakeev@avroid.tech> Reviewed-on: https://git.avroid.tech/DevOps/secrets/pulls/18
22 lines
903 B
YAML
22 lines
903 B
YAML
---
|
|
name: Static Application Security Testing
|
|
run-name: ${{ gitea.actor }} is start check sources
|
|
on: [pull_request]
|
|
|
|
jobs:
|
|
scan-secrets:
|
|
name: Scan secrets
|
|
runs-on: docker
|
|
container:
|
|
image: harbor.avroid.tech/devops/clang-format:14-node20
|
|
steps:
|
|
- run: echo "Start job on ${{ runner.name }} with os ${{ runner.os }}"
|
|
- run: echo "Work with branch ${{ gitea.ref }} repository ${{ gitea.repository }}"
|
|
- name: Check out repository code
|
|
uses: https://${{ secrets.CI_USER }}:${{ secrets.CI_TOKEN }}@git.avroid.tech/Mirrors/github-actions-checkout.git@v4
|
|
with:
|
|
fetch-depth: 0 # for work tj-actions/changed-files
|
|
persist-credentials: false # for work tj-actions/changed-files
|
|
- name: Scan for secrets
|
|
uses: https://${{ secrets.CI_USER }}:${{ secrets.CI_TOKEN }}@git.avroid.tech/Actions/gitleaks-docker-action.git@v1
|