scan_action_logs.yml

name: Scan Action Logs

on:
  schedule:
    - cron: "52 5 * * *"
  workflow_dispatch:

jobs:
  scan_run_logs:
    runs-on: ubuntu-latest
    name: Scan repo run logs
    steps:
      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
      - name: Scan run logs
        uses: josiahsiegel/runleaks@4dd30d107c03b6ade87978e10c94a77015e488f9
        id: scan
        with:
          github-token: ${{ secrets.RUNLEAKS_TOKEN }}
          run-limit: 500
          min-days-old: 0
          max-days-old: 2
          patterns-path: ".github/runleaks/patterns.txt"
          exclusions-path: ".github/runleaks/exclusions.txt"
          fail-on-leak: false
      - name: Get scan exceptions
        if: steps.scan.outputs.count > 0
        run: | 
          echo "count=${{ steps.scan.outputs.count }}"
          exceptions='${{ steps.scan.outputs.exceptions }}'
          exceptions_out=$(echo ${exceptions//"%0A"/} | jq '.')
          printf "\n<details><summary>Exceptions</summary>\n\n\`\`\`json\\n$exceptions_out\\n\`\`\`\n</details>" >> $GITHUB_STEP_SUMMARY
      - name: Failure due to exceptions
        if: steps.scan.outputs.count > 0
        run: exit 1