Update devsecops.yml

YamagutiSenior · Oct 13, 2024 · 068545d · 068545d
1 parent 26fa15b
commit 068545d
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/.github/workflows/devsecops.yml b/.github/workflows/devsecops.yml
@@ -17,6 +17,19 @@ jobs:
             GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}  # Needed to get PR information, if any
             SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
 
+  gitleaks:
+      name: gitleaks
+      runs-on: ubuntu-latest
+      needs: sonarcloud
+      steps:
+        - uses: actions/checkout@v4
+          with:
+            fetch-depth: 0
+        - uses: gitleaks/gitleaks-action@v2
+          env:
+            GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+            GITLEAKS_LICENSE: ${{ secrets.GITLEAKS_LICENSE}} # Only required for Organizations, not personal accounts.
+
   snyk:
     runs-on: ubuntu-latest
     needs: sonarcloud