ci: stage secret scan input inside scanner container
This commit is contained in:
@@ -16,7 +16,7 @@ jobs:
|
|||||||
set -euo pipefail
|
set -euo pipefail
|
||||||
scan_container="$(docker create ghcr.io/trufflesecurity/trufflehog:3.79.0 filesystem /scan --only-verified --fail --no-update)"
|
scan_container="$(docker create ghcr.io/trufflesecurity/trufflehog:3.79.0 filesystem /scan --only-verified --fail --no-update)"
|
||||||
trap 'docker rm -f "${scan_container}" >/dev/null 2>&1 || true' EXIT
|
trap 'docker rm -f "${scan_container}" >/dev/null 2>&1 || true' EXIT
|
||||||
tar --exclude=.git -cf - . | docker cp - "${scan_container}:/scan"
|
tar --exclude=.git --transform='s#^\.$#scan#;s#^\./#scan/#' -cf - . | docker cp - "${scan_container}:/"
|
||||||
docker start -a "${scan_container}"
|
docker start -a "${scan_container}"
|
||||||
|
|
||||||
quality:
|
quality:
|
||||||
|
|||||||
Reference in New Issue
Block a user