erabo/spiegel_podman
1
0
Fork 0
mirror of https://github.com/podman-container-tools/podman.git synced 2026-10-06 14:07:50 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 5

Scanning-secrets: Support new-branch/renovate link

Browse source 
Signed-off-by: Chris Evich <cevich@redhat.com>
This commit is contained in:
Chris Evich 2024-02-01 11:06:54 -05:00
parent 0e9b07a029
commit 0a4beea6db
No known key found for this signature in database
GPG key ID: 03EDC70FD578067F
1 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
.github/workflows/scan-secrets.yml vendored
View file

@ -81,6 +81,12 @@ jobs:
name: Provide URL showing code that needs human eyes (force-push or merge)
shell: bash
run: |
if [[ "$before" =~ ^0000+ ]]; then # Push to new branch (i.e. renovate branch)
echo "Please review newly opened branch for secret-leaks:"
# The event JSON provides the URL we need
jq -r -e '.compare' $GITHUB_EVENT_PATH
return 0
fi
echo "Please review force-push or merged-pr changes for secret-leaks:"
before=$(jq -r -e '.before' $GITHUB_EVENT_PATH)
after=$(jq -r -e '.after' $GITHUB_EVENT_PATH)