Skip to content

ci(betterleaks): add scan time limits; findings now annotated on the check - #21

Open
valentinab25 wants to merge 1 commit into
developfrom
betterleaks-check-output
Open

valentinab25 wants to merge 1 commit into
developfrom
betterleaks-check-output

Conversation

@valentinab25

Copy link
Copy Markdown
Contributor

What

  • timeout-minutes: 20 on the job (outer guard) and timeout-minutes: 15 for the scan. A scan that does not finish now fails as an error, never as a clean result.
  • No other input needed: eea/github-actions/betterleaks@v1 now
    • annotates each finding at its file and line on this check (and inline in "Files changed"),
    • adds a "No secrets found" notice when clean,
    • writes a job summary with all findings and a link to Handling findings.

Expected on this PR

develop still contains the test credentials from 7ef394b / e2614ab, so the check fails here with two annotations: setup.py:19 (secret-literal-assignment) and setup.py:20 (env-short-secret-assignment). Removing them should turn it green with the "No secrets found" notice.

…check

Job timeout-minutes 20 as outer guard, scan timeout-minutes 15. eea/github-actions/betterleaks@v1 now annotates findings at file and line on the check and writes a job summary.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant