-
Couldn't load subscription status.
- Fork 3
Open
Labels
ci-cdCI/CD and DevOps relatedCI/CD and DevOps relatedpriority:criticalCritical priority - blocks productionCritical priority - blocks productionsecuritySecurity related issuesSecurity related issues
Description
Priority
🔴 CRITICAL
Description
Add git hooks and CI checks for secrets using gitleaks/truffleHog.
Current State
No secret scanning - risk of committing credentials
Files to Create
.github/workflows/security.yml.pre-commit-config.yaml(update).gitleaks.toml
Acceptance Criteria
- Pre-commit hook for secrets
- CI workflow for secrets
- Baseline scan of existing code
- Block commits with secrets
- Documentation
Effort
2-3 days
Related Issues
Metadata
Metadata
Assignees
Labels
ci-cdCI/CD and DevOps relatedCI/CD and DevOps relatedpriority:criticalCritical priority - blocks productionCritical priority - blocks productionsecuritySecurity related issuesSecurity related issues