Update shivammathur/setup-php digest to 85a8dfd #756
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: GitGuardian scan | ||
on: [push, pull_request] | ||
jobs: | ||
scanning: | ||
name: GitGuardian scan | ||
runs-on: ubuntu-latest | ||
steps: | ||
- name: Checkout | ||
uses: actions/checkout@v4 | ||
with: | ||
fetch-depth: 0 # fetch all history so multiple commits can be scanned | ||
- name: GitGuardian scan | ||
uses: GitGuardian/ggshield-action@master | ||
env: | ||
GITHUB_PUSH_BEFORE_SHA: ${{ github.event.before }} | ||
GITHUB_PUSH_BASE_SHA: ${{ github.event.base }} | ||
GITHUB_PULL_BASE_SHA: ${{ github.event.pull_request.base.sha }} | ||
GITHUB_DEFAULT_BRANCH: ${{ github.event.repository.default_branch }} | ||
GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }} | ||
name: "GitGuardian Shield Action" | ||
description: "Scan commits for secrets and other issues." | ||
author: GitGuardian <[email protected]> | ||
Check failure on line 25 in .github/workflows/gitguardian.yml GitHub Actions / GitGuardian scanInvalid workflow file
|
||
inputs: | ||
args: | ||
description: | | ||
Arguments to be passed to ggshield secret scan | ||
Options: | ||
--show-secrets Show secrets in plaintext instead of hiding them. | ||
--exit-zero Always return a 0 (non-error) status code, even if issues | ||
are found. The env var GITGUARDIAN_EXIT_ZERO can also be used | ||
to set this option. | ||
--all-policies Present fails of all policies (Filenames, FileExtensions, | ||
Secret Detection). By default, only Secret Detection is | ||
shown. | ||
-v, --verbose Verbose display mode. | ||
required: false | ||
branding: | ||
icon: "shield" | ||
color: "blue" | ||
runs: | ||
using: "docker" | ||
image: "Dockerfile" | ||
args: | ||
- ${{ inputs.args }} | ||