diff --git a/.github/workflows/Secret Scanning.yml b/.github/workflows/Secret Scanning.yml new file mode 100644 index 0000000..fbef58e --- /dev/null +++ b/.github/workflows/Secret Scanning.yml @@ -0,0 +1,23 @@ +name: Secret Scanning + +on: + push: + branches: + - main + pull_request: + types: [opened, synchronize, reopened] + +jobs: + detect-secrets: + name: Detect-Secrets Scan + runs-on: ubuntu-latest + + steps: + - name: Checkout code + uses: actions/checkout@v4 + + - name: Install Detect-Secrets + run: pip install detect-secrets + + - name: Run Detect-Secrets + run: detect-secrets scan > .secrets.baseline