gitleaks.yml

# Scan git repos (or files) for secrets using regex and entropy 🔑

name: gitLeaks

on:
  push:
    branches:
      - master
    paths-ignore:
      - 'docs/**'
  pull_request:
    branches:
      - master
    paths-ignore:
      - 'docs/**'

jobs:
  gitleaks:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
        with:
          fetch-depth: '1'
          submodules: recursive
      - name: wget
        shell: bash
        run: |
          wget https://raw.githubusercontent.com/ycjcl868/gitleaks/master/.gitleaks.toml
      - name: gitleaks-action
        uses: ./.github/actions/gitleaks-action