feat(ci): add Gitleaks job for secret scanning
Signed-off-by: Klagarge <remi@heredero.ch>
This commit is contained in:
@@ -96,4 +96,12 @@ dast:
|
|||||||
script:
|
script:
|
||||||
- echo "Waiting for the app to start on http://app:5000"
|
- echo "Waiting for the app to start on http://app:5000"
|
||||||
- timeout 60 bash -c 'until curl -s http://app:5000; do echo "Waiting..."; sleep 3; done'
|
- timeout 60 bash -c 'until curl -s http://app:5000; do echo "Waiting..."; sleep 3; done'
|
||||||
- zap-full-scan.py -t http://app:5000 -I
|
- zap-full-scan.py -t http://app:5000 -I
|
||||||
|
|
||||||
|
gitleaks:
|
||||||
|
stage: test
|
||||||
|
image:
|
||||||
|
name: zricethezav/gitleaks:latest
|
||||||
|
entrypoint: [""]
|
||||||
|
script:
|
||||||
|
- gitleaks dir -v --redact=75 .
|
||||||
|
Reference in New Issue
Block a user