talisman-secrets-scan-action/action.yml
2021-09-19 08:30:08 +02:00

24 lines
776 B
YAML

name: "Detect secrets with Talisman"
description: "Scan an incoming range of commits for accidentally added secrets and sensitive information"
inputs:
local-ref:
description: "Ref pushed from"
required: false
default: refs/heads/main
local-sha:
description: "The latest of the incoming commits"
required: false
default: ${{ github.event.after }}
remote-ref:
description: "Ref that was updated"
required: false
default: refs/heads/main
remote-sha:
description: "The latest commit on the remote being pushed to"
required: false
default: ${{ github.event.before }}
runs:
using: "docker"
image: "Dockerfile"
args:
- ${{ inputs.local-ref }} ${{ inputs.local-sha }} ${{ inputs.remote-ref }} ${{ inputs.remote-sha }}