File tree 6 files changed +10
-15
lines changed
6 files changed +10
-15
lines changed Original file line number Diff line number Diff line change 3
3
# by a third-party and are governed by separate terms of service, privacy
4
4
# policy, and support documentation.
5
5
6
- name : Run gosec
6
+ name : Gosec
7
7
on :
8
8
push :
9
9
branches :
@@ -18,7 +18,7 @@ permissions: read-all
18
18
jobs :
19
19
gosec_job :
20
20
runs-on : ubuntu-latest
21
- name : Run gosec
21
+ name : Scan for vulns
22
22
steps :
23
23
- name : Harden Runner
24
24
uses : step-security/harden-runner@1b05615854632b887b69ae1be8cbefe72d3ae423 # v2.6.0
Original file line number Diff line number Diff line change 3
3
# by a third-party and are governed by separate terms of service, privacy
4
4
# policy, and support documentation.
5
5
6
- name : Run govulncheck
6
+ name : Govulncheck
7
7
on :
8
8
push :
9
9
branches :
@@ -18,7 +18,7 @@ permissions: read-all
18
18
jobs :
19
19
govulncheck_job :
20
20
runs-on : ubuntu-latest
21
- name : Run govulncheck
21
+ name : Scan for vulns
22
22
steps :
23
23
- name : Harden Runner
24
24
uses : step-security/harden-runner@1b05615854632b887b69ae1be8cbefe72d3ae423 # v2.6.0
Original file line number Diff line number Diff line change 3
3
# by a third-party and are governed by separate terms of service, privacy
4
4
# policy, and support documentation.
5
5
6
- name : Run osv-scanner
6
+ name : osv-scanner
7
7
on :
8
8
push :
9
9
branches :
@@ -18,7 +18,7 @@ permissions: read-all
18
18
jobs :
19
19
osv_scanner_job :
20
20
runs-on : ubuntu-latest
21
- name : Run osv-scanner
21
+ name : Scan for vulns
22
22
steps :
23
23
- name : Harden Runner
24
24
uses : step-security/harden-runner@1b05615854632b887b69ae1be8cbefe72d3ae423 # v2.6.0
Original file line number Diff line number Diff line change 3
3
# by a third-party and are governed by separate terms of service, privacy
4
4
# policy, and support documentation.
5
5
6
- name : Scorecard supply-chain security
6
+ name : Supply-Chain Security
7
7
on :
8
8
# For Branch-Protection check. Only the default branch is supported. See
9
9
# https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection
@@ -20,7 +20,7 @@ permissions: read-all
20
20
21
21
jobs :
22
22
analysis :
23
- name : Scorecard analysis
23
+ name : Perform analysis
24
24
runs-on : ubuntu-latest
25
25
permissions :
26
26
# Needed to upload the results to code-scanning dashboard.
Original file line number Diff line number Diff line change 3
3
# by a third-party and are governed by separate terms of service, privacy
4
4
# policy, and support documentation.
5
5
6
- name : Run TruffleHog
6
+ name : TruffleHog
7
7
on :
8
8
push :
9
9
branches :
@@ -18,7 +18,7 @@ permissions: read-all
18
18
jobs :
19
19
trufflehog_job :
20
20
runs-on : ubuntu-latest
21
- name : Run TruffleHog
21
+ name : Scan for secrets
22
22
steps :
23
23
- name : Harden Runner
24
24
uses : step-security/harden-runner@1b05615854632b887b69ae1be8cbefe72d3ae423 # v2.6.0
Original file line number Diff line number Diff line change 96
96
entry : bash -c 'trufflehog git file://. --since-commit HEAD --only-verified --fail --json 2>/dev/null | jq "."'
97
97
language : system
98
98
stages : [commit, push]
99
-
100
- - repo : https://github.com/gitleaks/gitleaks
101
- rev : v8.16.3
102
- hooks :
103
- - id : gitleaks
You can’t perform that action at this time.
0 commit comments