From 9ccdb31ea438b18f4ea5d3b23d417ba611d1739d Mon Sep 17 00:00:00 2001
From: Andrew Peabody <andrewpeabody@google.com>
Date: Tue, 31 Oct 2023 14:05:19 -0700
Subject: [PATCH] chore: enable secret_scanning

---
 infra/terraform/modules/repositories/main.tf | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/infra/terraform/modules/repositories/main.tf b/infra/terraform/modules/repositories/main.tf
index 651579980e5..4c5bc936132 100644
--- a/infra/terraform/modules/repositories/main.tf
+++ b/infra/terraform/modules/repositories/main.tf
@@ -63,6 +63,15 @@ resource "github_repository" "repo" {
   has_downloads               = false
   squash_merge_commit_message = "BLANK"
   squash_merge_commit_title   = "PR_TITLE"
+
+  security_and_analysis {
+    secret_scanning {
+      status = enabled
+    }
+    secret_scanning_push_protection {
+      status = enabled
+    }
+  }
 }
 
 resource "github_repository_collaborator" "dpebot" {