git-secrets.yaml

name: git-secrets Check
permissions: {}

on:
  push:
  workflow_dispatch:

  pull_request:
    branches: ["main", "release-*"]
  merge_group:

jobs:
  git-secrets:
    strategy:
      matrix:
        os: [ ubuntu-22.04 ]
    runs-on: ${{ matrix.os }}
    timeout-minutes: 5
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
      - name: Checkout awslabs/git-secrets
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
        with:
          repository: awslabs/git-secrets
          ref: master
          path: git-secrets
      - name: Install git-secrets
        run: |
          pushd git-secrets
          sudo make install
          popd
      - name: Run git-secrets
        run: |
          git-secrets --register-aws
          # If no files are provided, all files returned by git ls-files are scanned
          git-secrets --scan