https://github.com/max/secret-scan

https://github.com/max/secret-scan

Last synced: about 2 months ago
JSON representation

• Host: GitHub
• URL: https://github.com/max/secret-scan
• Owner: max
• Created: 2019-03-08T20:40:33.000Z (over 5 years ago)
• Default Branch: master
• Last Pushed: 2021-10-19T17:46:11.000Z (almost 3 years ago)
• Last Synced: 2024-06-12T08:14:00.597Z (3 months ago)
• Language: Shell
• Size: 14.6 KB
• Stars: 50
• Watchers: 7
• Forks: 28
• Open Issues: 3
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# Secret Scan for GitHub Actions

Scan your repo for secrets. AWS tokens, keys, this has you covered.

## Example

```yaml

on: push

name: Find Secrets

jobs:

  main:

    runs-on: ubuntu-latest

    steps:

      - uses: actions/checkout@v2

      - uses: max/secret-scan@master

```

## Example with path filters

```yaml

on: push

name: Find Secrets

jobs:

  main:

    runs-on: ubuntu-latest

    steps:

      - uses: actions/checkout@v2

      - uses: max/secret-scan@master

        with:

          include_path: 'configuration/include_paths.txt'

          exclude_path: 'configuration/exclude_paths.txt'

```

For more information about the format of the configuration files for include or exclude paths, please refer to [TruffleHog](https://github.com/dxa4481/truffleHog).