Skip to content

feat: add secret scanning workflow#145

Merged
movabo merged 1 commit intomasterfrom
feat/ING-5087-secret-scanning
Feb 27, 2026
Merged

feat: add secret scanning workflow#145
movabo merged 1 commit intomasterfrom
feat/ING-5087-secret-scanning

Conversation

@movabo
Copy link
Contributor

@movabo movabo commented Feb 25, 2026

ING-5087

Copy link
Member

@stempler stempler left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think the process for downloading the tools could be simplified. Using the release ID for gitleaks looks like something that can probably not be combined with renovate.

Both jq and gitleaks can be installed via mise.
So for example the mise-action could be used:

Option 1: Set up mise but do not install tools (as other tools potentially configured for mise in the repo are not needed), use mise exec to run jq and gitleaks commands.

Option 2: Set up mise and add jq and gitleaks to install_args so they are installed.

@movabo movabo requested a review from stempler February 26, 2026 12:32
Copy link
Member

@stempler stempler left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@movabo movabo marked this pull request as ready for review February 27, 2026 10:24
@movabo movabo force-pushed the feat/ING-5087-secret-scanning branch from 914561a to da10539 Compare February 27, 2026 10:26
@movabo movabo merged commit 4c99591 into master Feb 27, 2026
2 checks passed
@movabo movabo deleted the feat/ING-5087-secret-scanning branch February 27, 2026 10:27
@we-release
Copy link

we-release bot commented Feb 27, 2026

🎉 This PR is included in version 4.1.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

@we-release we-release bot added the released label Feb 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants