Skip to content

Commit 6cfdf08

Browse files
authored
Added PR comment and gitleak pre-commit check (#16)
1 parent fe7a56f commit 6cfdf08

File tree

2 files changed

+10
-3
lines changed

2 files changed

+10
-3
lines changed

.github/workflows/ci.yaml

Lines changed: 6 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -63,6 +63,7 @@ jobs:
6363
6464
tfsec:
6565
name: tfsec
66+
if: contains(github.event_name, 'pull_request')
6667
runs-on: ubuntu-latest
6768
permissions:
6869
pull-requests: write
@@ -71,10 +72,12 @@ jobs:
7172
- name: Checkout code
7273
uses: actions/checkout@v3
7374
- name: tfsec
74-
uses: aquasecurity/tfsec-action@v1.0.2
75+
id: tfsec
76+
uses: aquasecurity/tfsec-pr-commenter-action@v1.3.1
7577
with:
76-
additional_args: "--force-all-dirs --concise-output --code-theme=dark"
77-
version: "latest"
78+
github_token: ${{ github.token }}
79+
tfsec_args: "--force-all-dirs --concise-output --code-theme=dark --no-color"
80+
tfsec_version: "latest"
7881

7982
caller-identity-check:
8083
if: contains(github.event_name, 'pull_request')

.pre-commit-config.yaml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -35,3 +35,7 @@ repos:
3535
- id: end-of-file-fixer
3636
- id: mixed-line-ending
3737
- id: trailing-whitespace
38+
- repo: https://github.com/zricethezav/gitleaks
39+
rev: v8.15.2
40+
hooks:
41+
- id: gitleaks

0 commit comments

Comments
 (0)