GitHub Action?
brian-villanueva opened this issue · comments
I suggest creating a GitHub Action for SecretScanner to allow developers to easily have their code changes scanned for secrets (such as validation of Pull Requests before they are merged). Should be pretty straightforward using your filesystem scanning option. If there was a documented way to do this, I would be interested in trying it.
Hi @brian-villanueva we have GitHub actions in deepfence/ThreatMapper, for vulnerability scanning (https://github.com/deepfence/ThreatMapper/blob/master/ci-cd-integrations/github-actions/.github/workflows/main.yml)
Similar way we can do this for SecretScanning as well. If you are interested to take up this task, I would be more than happy to assign you this issue. LMK :)