Skip to content

docs(devcontainer): add trivy and its VSCode Extension #2

docs(devcontainer): add trivy and its VSCode Extension

docs(devcontainer): add trivy and its VSCode Extension #2

name: GitGuardian scan
on:
push:
# Publish `main` as Docker `latest` image.
branches:
- main
# Publish `v1.2.3` tags as releases.
tags:
- v*
pull_request:
branches:
- main
jobs:
scanning:
name: GitGuardian scan
runs-on: ubuntu-22.04
steps:
- name: Checkout
uses: actions/checkout@v4.1.1
with:
fetch-depth: 0 # fetch all history so multiple commits can be scanned
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: GitGuardian scan
uses: GitGuardian/ggshield-action@v1.14.4
with:
args: --show-secrets --exit-zero --all-policies --verbose
env:
GITHUB_PUSH_BEFORE_SHA: ${{ github.event.before }}
GITHUB_PUSH_BASE_SHA: ${{ github.event.base }}
GITHUB_PULL_BASE_SHA: ${{ github.event.pull_request.base.sha }}
GITHUB_DEFAULT_BRANCH: main
GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }}