mirror of
https://github.com/msitarzewski/agency-agents.git
synced 2026-10-20 10:19:59 +00:00
fix(secrets): pass GITHUB_TOKEN to the gitleaks PR scan
This commit is contained in:
@@ -82,7 +82,9 @@ jobs:
|
||||
- uses: actions/checkout@v4
|
||||
with: { fetch-depth: 0 } # full history so an old leak is caught too
|
||||
- uses: gitleaks/gitleaks-action@v2
|
||||
env: { GITLEAKS_CONFIG: .gitleaks.toml } # allowlist known-public test fixtures
|
||||
env:
|
||||
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # required by the action to scan pull_request events
|
||||
GITLEAKS_CONFIG: .gitleaks.toml # allowlist known-public test fixtures
|
||||
```
|
||||
|
||||
### Static Key → Dynamic, Short-Lived Credential
|
||||
|
||||
Reference in New Issue
Block a user