From 7bc2e0afe0d3a3eaf30f7f7be91610b323c6ebaf Mon Sep 17 00:00:00 2001
From: Luca Bernstein <luca.bernstein@sap.com>
Date: Thu, 7 Nov 2024 14:49:28 +0100
Subject: [PATCH] gitguardian

---
 .github/workflows/gitguardian.yaml | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 .github/workflows/gitguardian.yaml

diff --git a/.github/workflows/gitguardian.yaml b/.github/workflows/gitguardian.yaml
new file mode 100644
index 000000000000..7655f7c9e3e4
--- /dev/null
+++ b/.github/workflows/gitguardian.yaml
@@ -0,0 +1,21 @@
+name: GitGuardian scan
+
+on: [push, pull_request]
+
+jobs:
+  scanning:
+    name: GitGuardian scan
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0 # fetch all history so multiple commits can be scanned
+      - name: GitGuardian scan
+        uses: GitGuardian/ggshield/actions/secret@v1.33.0
+        env:
+          GITHUB_PUSH_BEFORE_SHA: ${{ github.event.before }}
+          GITHUB_PUSH_BASE_SHA: ${{ github.event.base }}
+          GITHUB_PULL_BASE_SHA: ${{ github.event.pull_request.base.sha }}
+          GITHUB_DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
+          GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }}