From bb5173f67d7d8fa91739edee7267ba43b77426b4 Mon Sep 17 00:00:00 2001 From: Wayne Grant Date: Wed, 27 Sep 2023 09:22:16 +0100 Subject: [PATCH 1/2] chore: add secrets scanning --- .circleci/config.yml | 13 +++++++++++++ .pre-commit-config.yaml | 5 +++++ 2 files changed, 18 insertions(+) create mode 100644 .circleci/config.yml create mode 100644 .pre-commit-config.yaml diff --git a/.circleci/config.yml b/.circleci/config.yml new file mode 100644 index 0000000..f0c3187 --- /dev/null +++ b/.circleci/config.yml @@ -0,0 +1,13 @@ +workflows: + version: 2 + CICD: + jobs: + - prodsec/secrets-scan: + name: Scan repository for secrets + context: + - snyk-bot-slack + channel: team-link-pipeline-info + filters: + branches: + ignore: + - main diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml new file mode 100644 index 0000000..c9528f4 --- /dev/null +++ b/.pre-commit-config.yaml @@ -0,0 +1,5 @@ +repos: + - repo: https://github.com/gitleaks/gitleaks + rev: v8.16.1 + hooks: + - id: gitleaks From dda0d79092474d8d1240ecacb067c181dc557a17 Mon Sep 17 00:00:00 2001 From: Wayne Grant Date: Wed, 27 Sep 2023 09:24:47 +0100 Subject: [PATCH 2/2] chore: add secrets scanning --- .circleci/config.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.circleci/config.yml b/.circleci/config.yml index f0c3187..fb56671 100644 --- a/.circleci/config.yml +++ b/.circleci/config.yml @@ -1,3 +1,8 @@ +version: 2.1 + +orbs: + prodsec: snyk/prodsec-orb@1.0 + workflows: version: 2 CICD: