chore: configure secret scanning

.circleci/config.yaml

@@ -0,0 +1,14 @@
+version: 2.1
+
+orbs:
+  prodsec: snyk/[email protected]
+
+workflows:
+  version: 2
+  CICD:
+    jobs:
+      - prodsec/secrets-scan:
+          name: Scan repository for secrets
+          context:
+            - snyk-bot-slack
+          channel: hammerhead-alerts

.gitleaksignore

@@ -0,0 +1,42 @@
+# add false positives here
+
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17029
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17034
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17038
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17042
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17046
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17050
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17054
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17058
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17062
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17066
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17070
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17074
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17078
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17082
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17086
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17090
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17094
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17098
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17102
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17106
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17110
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17114
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17118
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17122
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17126
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17130
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17134
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17138
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17142
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17146
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17150
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17154
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result.json:generic-api-key:17158
+3b54f57b9f4fa76dbe72ff76c28f8719db5b340f:src/test/resources/sample-userinfo.json:generic-api-key:12
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result-with-remediation.json:generic-api-key:44067
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result-with-remediation.json:generic-api-key:44072
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result-with-remediation.json:generic-api-key:44076
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result-with-remediation.json:generic-api-key:44080
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result-with-remediation.json:generic-api-key:44084
+c3f9781b901513845c54c9dacf93c2a437d972d6:src/integTest/resources/container-test-result-with-remediation.json:generic-api-key:44088

.pre-commit-config.yaml

@@ -0,0 +1,7 @@
+# See https://pre-commit.com for more information
+# See https://pre-commit.com/hooks.html for more hooks
+repos:
+  - repo: https://github.com/gitleaks/gitleaks
+    rev: v8.17.0
+    hooks:
+      - id: gitleaks