chore: secrets scanning (#350)

chore: add secrets scanning
snyk · Jul 11, 2024 · 1073ffe · 1073ffe
1 parent 7de0754
commit 1073ffe
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 1 deletion.
diff --git a/.circleci/config.yml b/.circleci/config.yml
@@ -1,10 +1,10 @@
 version: 2.1
 
 orbs:
+  prodsec: snyk/prodsec-orb@1
   go: circleci/[email protected]
   node: circleci/[email protected]
   publish: snyk/publish@1
-  prodsec: snyk/[email protected]
 
 defaults: &defaults
   resource_class: small
@@ -116,6 +116,14 @@ workflows:
           name: Lint
           <<: *ignore_main_branch_filter
 
+      - prodsec/secrets-scan:
+          name: Scan repository for secrets
+          context:
+            - snyk-bot-slack
+          channel: alerts-api
+          trusted-branch: main
+          <<: *ignore_main_branch_filter
+
       - security-scans:
           name: Security Scans
           context:

diff --git a/.gitleaksignore b/.gitleaksignore
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -0,0 +1,5 @@
+repos:
+  - repo: https://github.com/gitleaks/gitleaks
+    rev: v8.16.2
+    hooks:
+      - id: gitleaks