Skip to content

ci: add full-tree secret scanning - #13

Merged
xnoto merged 1 commit into
mainfrom
agent/secret-scanning
Jul 31, 2026
Merged

ci: add full-tree secret scanning#13
xnoto merged 1 commit into
mainfrom
agent/secret-scanning

Conversation

@xnoto

@xnoto xnoto commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

Summary

  • add Gitleaks and private-key scanning to image and canonical tfroot hooks
  • run root checks for every main push, pull request, and manual dispatch
  • gate image builds on pre-commit and actionlint checks

Validation

  • pre-commit run --all-files
  • actionlint
  • Gitleaks full-tree scan

@xnoto
xnoto merged commit 50c24b6 into main Jul 31, 2026
3 checks passed
@xnoto
xnoto deleted the agent/secret-scanning branch July 31, 2026 06:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant