mirror of
https://github.com/PrefectHQ/fastmcp.git
synced 2026-10-11 23:43:20 +02:00
6d6aee4168Add local and CI secret scanning with a pinned gitleaks installation and reviewed content-based exclusions. Co-authored-by: Bill Easton <bill@pydantic.dev> Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
18 lines
547 B
YAML
18 lines
547 B
YAML
name: "Setup gitleaks"
|
|
description: "Install the gitleaks binary onto PATH for the gitleaks prek hook"
|
|
|
|
inputs:
|
|
version:
|
|
description: "gitleaks release version (without leading v)"
|
|
required: false
|
|
default: "8.30.1"
|
|
|
|
runs:
|
|
using: "composite"
|
|
steps:
|
|
- name: Install gitleaks
|
|
shell: bash
|
|
run: |
|
|
curl -sSfL "https://github.com/gitleaks/gitleaks/releases/download/v${{ inputs.version }}/gitleaks_${{ inputs.version }}_linux_x64.tar.gz" \
|
|
| tar -xz -C /usr/local/bin gitleaks
|
|
gitleaks version
|