Skip to content

v4.2.1: docs — text-optimize/text-optimizer pages for v4.2.0, fix 404… #259

v4.2.1: docs — text-optimize/text-optimizer pages for v4.2.0, fix 404…

v4.2.1: docs — text-optimize/text-optimizer pages for v4.2.0, fix 404… #259

Workflow file for this run

name: Gitleaks
on:
push:
branches: [ main ]
tags-ignore:
- "v*.*.*"
pull_request:
branches: [main]
schedule:
- cron: '0 6 * * 1'
jobs:
secrets:
name: Secrets scan
runs-on: ubuntu-latest
permissions:
security-events: write
steps:
- uses: actions/checkout@v6
with:
fetch-depth: 0
- uses: gitleaks/gitleaks-action@v2
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
GITLEAKS_ENABLE_SARIF: "true"
- uses: github/codeql-action/upload-sarif@v4
if: always() && hashFiles('results.sarif') != ''
with:
sarif_file: results.sarif
- uses: actions/upload-artifact@v4
if: always() && hashFiles('results.sarif') != ''
with:
name: gitleaks-sarif
path: results.sarif
- name: Summary
if: always()
run: |
STATUS="${{ job.status }}"
[ "$STATUS" = "success" ] && ICON="✅" || ICON="❌"
RUN_URL="${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
{
echo "## ${ICON} Gitleaks — Secrets Scan"
echo ""
echo "| | |"
echo "|---|---|"
echo "| Status | **${STATUS}** |"
echo "| Commit | \`${{ github.sha }}\` |"
echo "| Branch | \`${{ github.ref_name }}\` |"
echo ""
echo "📄 [Download SARIF report](${RUN_URL}#artifacts)"
} >> "$GITHUB_STEP_SUMMARY"