Merge pull request #50 from nationalarchives/chore/add-git-secrets-check

Add a check for secrets
nationalarchives · Dec 2, 2022 · d2520f7 · d2520f7
2 parents df39f22 + 168aa61
commit d2520f7
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/.gitallowed b/.gitallowed
@@ -0,0 +1 @@
+arn:[a-z0-9-:]+:[0-9]{12}:[a-z0-9-]+
diff --git a/.github/workflows/secrets.yml b/.github/workflows/secrets.yml
@@ -0,0 +1,11 @@
+name: Source safety
+on:
+  pull_request:
+  push:
+jobs:
+  secrets:
+    name: Check for secrets
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - uses: nationalarchives/tdr-github-actions/.github/actions/run-git-secrets@main