Skip to content

Add Betterleaks secret scanning to CI - #108

Open
shubham-s-pandey wants to merge 2 commits into
GenAI-Security-Project:mainfrom
shubham-s-pandey:ci/evaluate-betterleaks
Open

shubham-s-pandey wants to merge 2 commits into
GenAI-Security-Project:mainfrom
shubham-s-pandey:ci/evaluate-betterleaks

Conversation

@shubham-s-pandey

Copy link
Copy Markdown

Summary

Add a Betterleaks secret-scanning workflow for pull requests and pushes to the default branch.

Scope

  • Scans the complete Git history.
  • Keeps the repository configuration small and reviewable.
  • Does not require API keys or external services.
  • Uses read-only GitHub Actions permissions.
  • Does not remove or modify any existing scanner.

Validation

  • Workflow runs on pull requests.
  • Workflow runs on pushes to the default branch.
  • Workflow can also be started manually.
  • The container image is pinned to v2.0.0-rc.1.

Signed-off-by: Shubham Pandey <56669789+shubham-s-pandey@users.noreply.github.com>
Signed-off-by: Shubham Pandey <56669789+shubham-s-pandey@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant