Jens/geointel
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(ci): run secret scan inside isolated workspace
Managed validation / full (pull_request) Canceled after 0s
Details
GeoIntel release gates / Compile, test, contracts and builds (pull_request) Canceled after 0s
Details
GeoIntel release gates / Python and npm vulnerability policy (pull_request) Canceled after 0s
Details
GeoIntel release gates / GIS image, SBOM and container scan (pull_request) Canceled after 0s
Details
GeoIntel release gates / Compile, test, contracts and builds (push) Failing after 1m52s
Details
GeoIntel release gates / Python and npm vulnerability policy (push) Successful in 1m13s
Details
GeoIntel release gates / GIS image, SBOM and container scan (push) Failing after 1m25s
Details

Browse Source
This commit is contained in:
NuklearRabbit
2026-08-28 23:57:46 +02:00
parent 62e5643fd8
commit 350ac3e950
1 changed files with 13 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/release-gates.yml
+13 -4
View File
@@ -24,10 +24,19 @@ jobs:
with: with:
fetch-depth: 0 fetch-depth: 0
- name: Secret scan - name: Secret scan
uses: trufflesecurity/trufflehog@v3.79.0 shell: bash
with: run: |
path: ./ set -euo pipefail
extra_args: --only-verified repository="$PWD"
source="file:///repo"
workspace=(-v "$repository:/repo" -w /repo)
if docker inspect "${HOSTNAME:-}" >/dev/null 2>&1; then
source="file://$repository"
workspace=(--volumes-from "$HOSTNAME" -w "$repository")
fi
docker run --rm "${workspace[@]}" \
ghcr.io/trufflesecurity/trufflehog@sha256:7104dbb84d1ad2f5f6fa1134e92c6aa6f701f0a4ac2efd5a4c5c96225d899fe3 \
git "$source" --fail --no-update --github-actions --only-verified
- uses: actions/setup-python@v5 - uses: actions/setup-python@v5
with: with:
python-version: "3.11" python-version: "3.11"