Bump csharpier from 0.28.2 to 0.29.1 #208
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Infisical secrets check | |
| on: | |
| workflow_dispatch: | |
| pull_request: | |
| pull_request_target: | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| secrets-scan: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| pull-requests: write | |
| steps: | |
| - name: Checkout repo | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| - name: Set Infisical package source | |
| shell: bash | |
| run: curl -1sLf 'https://dl.cloudsmith.io/public/infisical/infisical-cli/setup.deb.sh' | sudo -E bash | |
| - name: Install Infisical | |
| shell: bash | |
| run: | | |
| sudo apt-get update && sudo apt-get install -y infisical | |
| - name: Run scan | |
| shell: bash | |
| run: infisical scan --redact -f csv -r secrets-result.csv 2>&1 | tee >(sed -r 's/\x1b\[[0-9;]*m//g' > secrets-result.log) | |
| - name: Read secrets-result.log | |
| uses: guibranco/[email protected] | |
| if: always() | |
| id: log | |
| with: | |
| path: secrets-result.log | |
| - name: Read secrets-result.log | |
| uses: guibranco/[email protected] | |
| if: failure() | |
| id: report | |
| with: | |
| path: secrets-result.csv | |
| - name: Update PR with comment | |
| uses: mshick/add-pr-comment@v2 | |
| if: >- | |
| always() && | |
| ( | |
| (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository) || | |
| (github.event_name == 'pull_request_target' && github.event.pull_request.head.repo.full_name != github.repository) || | |
| (github.event_name == 'workflow_dispatch') | |
| ) | |
| with: | |
| refresh-message-position: true | |
| message-id: 'secrets-result' | |
| message: | | |
| **Infisical secrets check:** :white_check_mark: No secrets leaked! | |
| **Scan results:** | |
| ``` | |
| ${{ steps.log.outputs.contents }} | |
| ``` | |
| message-failure: | | |
| **Infisical secrets check:** :rotating_light: Secrets leaked! | |
| **Scan results:** | |
| ``` | |
| ${{ steps.log.outputs.contents }} | |
| ``` | |
| **Scan report:** | |
| ``` | |
| ${{ steps.report.outputs.contents }} | |
| ``` | |
| message-cancelled: | | |
| **Infisical secrets check:** :o: Secrets check cancelled! |