From 8ce0d37a84e6156585337c2287d70ee4939484c7 Mon Sep 17 00:00:00 2001 From: Wayne Grant <117590766+wayne-grant@users.noreply.github.com> Date: Wed, 27 Sep 2023 09:31:28 +0100 Subject: [PATCH] chore: add secrets scanning (#45) * chore: add secrets scanning --- .circleci/config.yml | 18 ++++++++++++++++++ .pre-commit-config.yaml | 5 +++++ 2 files changed, 23 insertions(+) create mode 100644 .circleci/config.yml create mode 100644 .pre-commit-config.yaml diff --git a/.circleci/config.yml b/.circleci/config.yml new file mode 100644 index 0000000..fb56671 --- /dev/null +++ b/.circleci/config.yml @@ -0,0 +1,18 @@ +version: 2.1 + +orbs: + prodsec: snyk/prodsec-orb@1.0 + +workflows: + version: 2 + CICD: + jobs: + - prodsec/secrets-scan: + name: Scan repository for secrets + context: + - snyk-bot-slack + channel: team-link-pipeline-info + filters: + branches: + ignore: + - main diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml new file mode 100644 index 0000000..c9528f4 --- /dev/null +++ b/.pre-commit-config.yaml @@ -0,0 +1,5 @@ +repos: + - repo: https://github.com/gitleaks/gitleaks + rev: v8.16.1 + hooks: + - id: gitleaks