ci: add git-secrets (#22)

drink7036290 · Dec 29, 2024 · 0d88fe5 · 0d88fe5
1 parent aa444c3
commit 0d88fe5
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 5 deletions.
diff --git a/.github/actions/basics/action.yml b/.github/actions/basics/action.yml
@@ -59,6 +59,18 @@ runs:
 
     # ===============================================
 
+    - name: Install git-secrets
+      shell: bash
+      run: |
+        sudo apt-get update && sudo apt-get install -y git-secrets
+        git-secrets --register-aws
+
+    - uses: ./.github/actions/elapsed-time
+      with:
+        statement: "Install git-secrets"
+
+    # ===============================================
+
     - name: restore lychee cache
       uses: actions/cache@v4
       with:

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -124,12 +124,17 @@ repos:
         pass_filenames: true
         types: [yaml]
 
+      - id: git-secrets
+        name: git-secrets
+        language: system
+        entry: bash
+        args:
+          - -c
+          - |
+            git-secrets --scan
+        pass_filenames: false
+
   - repo: https://github.com/igorshubovych/markdownlint-cli
     rev: v0.43.0
     hooks:
       - id: markdownlint
-
-  - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v5.0.0
-    hooks:
-      - id: forbid-submodules