From c12787caa7de6c2a09380499520b55c915c339fa Mon Sep 17 00:00:00 2001 From: Aravind Kumar Date: Fri, 17 May 2024 17:41:37 +0530 Subject: [PATCH] Delete secrets-scan.yml --- .github/workflows/secrets-scan.yml | 55 ------------------------------ 1 file changed, 55 deletions(-) delete mode 100644 .github/workflows/secrets-scan.yml diff --git a/.github/workflows/secrets-scan.yml b/.github/workflows/secrets-scan.yml deleted file mode 100644 index 1ed18f9..0000000 --- a/.github/workflows/secrets-scan.yml +++ /dev/null @@ -1,55 +0,0 @@ -name: Secrets Scan -on: - pull_request: - types: [opened, synchronize, reopened] -jobs: - security-secrets: - runs-on: ubuntu-latest - if: ${{ github.base_ref == 'main' || github.base_ref == 'master' }} - steps: - - uses: actions/checkout@v2 - with: - fetch-depth: 0 - - - name: Install Expect, jq and Python - run: sudo rm /etc/apt/sources.list.d/microsoft-prod.list && sudo apt-get update --fix-missing && sudo apt-get install -y expect jq python3 python3-pip wkhtmltopdf - - - name: Install Python packages - run: pip install pandas json2html tabulate - - - name: Install Talisman - run: | - curl --silent https://raw.githubusercontent.com/thoughtworks/talisman/v1.32.0/install.sh > install.bash - chmod +x install.bash - ./install.bash - - - name: Run Talisman - id: run_talisman - run: /usr/local/bin/talisman --scan - continue-on-error: true - - - name: Convert JSON to HTML - run: | - python3 -c " - import json - import os - from json2html import * - with open('talisman_report/talisman_reports/data/report.json') as f: - data = json.load(f) - html = json2html.convert(json = data) - os.makedirs('talisman_html_report', exist_ok=True) - with open('talisman_html_report/report.html', 'w') as f: - f.write(html) - " && wkhtmltopdf talisman_html_report/report.html talisman_report.pdf - - - name: Upload Report - id: upload_report - uses: actions/upload-artifact@v4 - with: - name: talisman-report-pdf - path: talisman_report.pdf - - - name: Check the status of talisman scan - run: | - # if [[ ${{ steps.run_talisman.outcome }} == "success" ]]; then exit 0; else echo "Download the Talisman scan report from Artifact: ${{ steps.upload_report.outputs.artifact-url }}" && exit 1; fi - echo "Download the Talisman scan report from Artifact: ${{ steps.upload_report.outputs.artifact-url }}"; \ No newline at end of file