From 1cb6cfc081b2add00aaf7681fc425ecff61295cb Mon Sep 17 00:00:00 2001 From: RZFeeser Date: Sun, 25 Jun 2023 18:10:24 -0400 Subject: [PATCH 1/3] Update gitleaks_scan.yml --- .github/workflows/gitleaks_scan.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/gitleaks_scan.yml b/.github/workflows/gitleaks_scan.yml index af712a5..4d51e5a 100644 --- a/.github/workflows/gitleaks_scan.yml +++ b/.github/workflows/gitleaks_scan.yml @@ -7,7 +7,7 @@ jobs: steps: - uses: actions/checkout@v3 with: - fetch-depth: 0 + fetch-depth: 1 # this is how many commits "back" to check with gitleaks - uses: gitleaks/gitleaks-action@v2 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} From c7bc700c373d316630bee3aa63b6cc18896874a2 Mon Sep 17 00:00:00 2001 From: RZFeeser Date: Sun, 25 Jun 2023 18:22:01 -0400 Subject: [PATCH 2/3] Update gitleaks_scan.yml --- .github/workflows/gitleaks_scan.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/gitleaks_scan.yml b/.github/workflows/gitleaks_scan.yml index 4d51e5a..4cd6e23 100644 --- a/.github/workflows/gitleaks_scan.yml +++ b/.github/workflows/gitleaks_scan.yml @@ -8,6 +8,7 @@ jobs: - uses: actions/checkout@v3 with: fetch-depth: 1 # this is how many commits "back" to check with gitleaks + # a value of 0 will check every commit across all branches - uses: gitleaks/gitleaks-action@v2 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} From b9ddb67b7a04f5dc99b210c5995557ea8d1b75c8 Mon Sep 17 00:00:00 2001 From: RZFeeser Date: Sun, 25 Jun 2023 18:36:55 -0400 Subject: [PATCH 3/3] Update gitleaks_scan.yml --- .github/workflows/gitleaks_scan.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.github/workflows/gitleaks_scan.yml b/.github/workflows/gitleaks_scan.yml index 4cd6e23..02afaee 100644 --- a/.github/workflows/gitleaks_scan.yml +++ b/.github/workflows/gitleaks_scan.yml @@ -5,10 +5,13 @@ jobs: name: gitleaks runs-on: ubuntu-latest steps: + # step 1 - clone the repository with the checkout action - uses: actions/checkout@v3 with: + ref: ${{ github.head_ref }} # clone only the branch that triggered the action fetch-depth: 1 # this is how many commits "back" to check with gitleaks - # a value of 0 will check every commit across all branches + # a value of 0 will check every commit (across all branches - use "ref" to limit" + # step 2 - run the gitleaks-action tool against what has been cloned - uses: gitleaks/gitleaks-action@v2 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}