Skip to content

ci(betterleaks): use shared eea/github-actions/betterleaks@v1 - #19

Merged
valentinab25 merged 1 commit into
developfrom
betterleaks-shared-action
Nov 3, 2026
Merged

valentinab25 merged 1 commit into
developfrom
betterleaks-shared-action

Conversation

@valentinab25

Copy link
Copy Markdown
Contributor

What

  • .github/workflows/betterleaks.yml: replaced the full per-repo workflow (dortort/betterleaks-action@v0.1.0) with the shared action eea/github-actions/betterleaks@v1. Same behaviour: dir scan of the checkout, redacted report artifact, email to the committer, failing check.
  • .gitleaks.toml: reduced to a stub. The common EEA rules now come from the action's base config (eea-base.toml); repository-specific allowlists go here (none needed for this repo).

Why

Pilot of the migration of the 82 EEA repositories using Betterleaks to one shared action, so scanner updates and rule changes are made once in eea/github-actions.

Testing

  • Local scan of this branch with base + repo config: no leaks.
  • To be tested on this PR: one commit with a fake leak (check must fail and email the committer), then a clean commit (check must pass).

Replaces the per-repo workflow (dortort/betterleaks-action) with the shared
action. The common EEA rules now come from the action's base config, so
.gitleaks.toml only keeps repository-specific allowlists (none here).
@valentinab25
valentinab25 merged commit 00ad42a into develop Nov 3, 2026
2 checks passed
@valentinab25
valentinab25 deleted the betterleaks-shared-action branch November 3, 2026 11:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant