talisman-secrets-scan-action/action.yml
2021-09-19 08:22:18 +02:00

16 lines
559 B
YAML

name: "Detect secrets with Talisman"
description: "Scan an incoming range of commits for accidentally added secrets and sensitive information"
inputs:
local-sha:
description: "The latest of the incoming commits"
required: false
default: ${{ github.event.after }}
remote-sha:
description: "The latest commit on the remote being pushed to"
required: false
default: ${{ github.event.before }}
runs:
using: "docker"
image: "Dockerfile"
args:
- refs/heads/main ${{ inputs.local-sha }} refs/heads/main ${{ inputs.remote-sha }}