Skip to content

Commit

Permalink
Bump guibranco/github-file-reader-action-v2 from 2.2.699 to 2.2.701 (#…
Browse files Browse the repository at this point in the history
…115)

* Bump guibranco/github-file-reader-action-v2 from 2.2.699 to 2.2.701

Bumps [guibranco/github-file-reader-action-v2](https://github.com/guibranco/github-file-reader-action-v2) from 2.2.699 to 2.2.701.
- [Release notes](https://github.com/guibranco/github-file-reader-action-v2/releases)
- [Commits](guibranco/github-file-reader-action-v2@v2.2.699...v2.2.701)

---
updated-dependencies:
- dependency-name: guibranco/github-file-reader-action-v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update infisical-secrets-check.yml

* Update deep-source.yml

* Update build.yml

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Guilherme Branco Stracini <guilherme@guilhermebranco.com.br>
  • Loading branch information
dependabot[bot] and guibranco authored Oct 16, 2024
1 parent d60018c commit abab375
Show file tree
Hide file tree
Showing 3 changed files with 4 additions and 90 deletions.
2 changes: 1 addition & 1 deletion .github/workflows/build.yml
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ jobs:
- name: Setup .NET
uses: actions/setup-dotnet@v4
with:
dotnet-version: '7.0.x'
dotnet-version: '8.0.x'

- name: Build solution
run: dotnet build -c Debug
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/deep-source.yml
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ jobs:
- name: Setup .NET
uses: actions/setup-dotnet@v4
with:
dotnet-version: '7.0.x'
dotnet-version: '8.0.x'

- name: Build and analyze
env:
Expand Down
90 changes: 2 additions & 88 deletions .github/workflows/infisical-secrets-check.yml
Original file line number Diff line number Diff line change
Expand Up @@ -22,91 +22,5 @@ jobs:
with:
fetch-depth: 0

- name: Set Infisical package source
shell: bash
run: curl -1sLf 'https://dl.cloudsmith.io/public/infisical/infisical-cli/setup.deb.sh' | sudo -E bash

- name: Install tools
shell: bash
run: |
sudo apt-get update && sudo apt-get install -y infisical
pip install csvkit
npm install -g csv-to-markdown-table
- name: Run scan
shell: bash
run: infisical scan --redact -f csv -r secrets-result-raw.csv 2>&1 | tee >(sed -r 's/\x1b\[[0-9;]*m//g' >secrets-result.log)

- name: Generate report
shell: bash
if: failure()
run: |
if [[ -s secrets-result-raw.csv ]]; then
csvformat -M $'\r' secrets-result-raw.csv | sed -e ':a' -e 'N;$!ba' -e 's/\n/\\n/g' | tr '\r' '\n' | head -n 11 >secrets-result.csv
csv-to-markdown-table --delim , --headers <secrets-result.csv >secrets-result.md
fi
- name: Upload artifacts secrets-result.log
uses: actions/upload-artifact@v4
if: always()
with:
name: report-log
path: secrets-result.log

- name: Upload artifacts secrets-result.csv
uses: actions/upload-artifact@v4
if: failure()
with:
name: report-csv
path: secrets-result.csv

- name: Upload artifacts secrets-result.md
uses: actions/upload-artifact@v4
if: failure()
with:
name: report-md
path: secrets-result.md

- name: Read secrets-result.log
uses: guibranco/github-file-reader-action-v2@v2.2.699
if: always()
id: log
with:
path: secrets-result.log

- name: Read secrets-result.md
uses: guibranco/github-file-reader-action-v2@v2.2.699
if: failure()
id: report
with:
path: secrets-result.md

- name: Update PR with comment
uses: mshick/add-pr-comment@v2
if: always()
with:
refresh-message-position: true
message-id: 'secrets-result'
message: |
**Infisical secrets check:** :white_check_mark: No secrets leaked!
**Scan results:**
```
${{ steps.log.outputs.contents }}
```
message-failure: |
**Infisical secrets check:** :rotating_light: Secrets leaked!
**Scan results:**
```
${{ steps.log.outputs.contents }}
```
<details>
<summary>🔎 Detected secrets in your GIT history</summary>
${{ steps.report.outputs.contents }}
</details>
message-cancelled: |
**Infisical secrets check:** :o: Secrets check cancelled!
- name: Infisical secrets check
uses: guibranco/github-infisical-secrets-check-action@v1.1.12

0 comments on commit abab375

Please sign in to comment.