reviewdog/action-gitleaks

Run gitleaks with reviewdog

action-gitleaks

This action runs gitleaks with reviewdog on pull requests to improve code review experience.

Input

inputs:
  github_token:
    description: 'GITHUB_TOKEN'
    default: '${{ github.token }}'
  workdir:
    description: 'Working directory relative to the root directory.'
    default: '.'
  ### Flags for reviewdog ###
  level:
    description: 'Report level for reviewdog [info,warning,error]'
    default: 'error'
  reporter:
    description: 'Reporter of reviewdog command [github-pr-check,github-pr-review].'
    default: 'github-pr-check'
  filter_mode:
    description: |
      Filtering mode for the reviewdog command [added,diff_context,file,nofilter].
      Default is added.
    default: 'added'
  fail_on_error:
    description: |
      Exit code for reviewdog when errors are found [true,false]
      Default is `false`.
    default: 'false'
  reviewdog_flags:
    description: 'Additional reviewdog flags'
    default: ''
  ### Flags for gitleaks ###
  gitleaks_flags:
    description: "flags and args of gitleaks command. Default: ''"
    default: ''

Usage

name: reviewdog
on: [pull_request]
jobs:
  gitleaks:
    name: runner / gitleaks
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v2
      - uses: reviewdog/action-gitleaks@v1
        with:
          github_token: ${{ secrets.github_token }}
          # Change reviewdog reporter if you need [github-pr-check,github-check,github-pr-review].
          reporter: github-pr-review
          # Change reporter level if you need.
          # GitHub Status Check won't become failure with warning.
          level: warning

Development

Release

haya14busa/action-bumpr

You can bump version on merging Pull Requests with specific labels (bump:major,bump:minor,bump:patch). Pushing tag manually by yourself also work.

haya14busa/action-update-semver

This action updates major/minor release tags on a tag push. e.g. Update v1 and v1.2 tag when released v1.2.3. ref: https://help.github.com/en/articles/about-actions#versioning-your-action

Lint - reviewdog integration

This reviewdog action itself is integrated with reviewdog to run lints which is useful for Docker container based actions.

Supported linters:

• reviewdog/action-shellcheck
• reviewdog/action-hadolint
• reviewdog/action-misspell
• reviewdog/action-alex

Dependencies Update Automation

This repository uses reviewdog/action-depup to update reviewdog version.

action-gitleaks's Issues

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update alpine docker tag to v3.19
• chore(deps): update peter-evans/create-pull-request action to v6

Detected dependencies

dockerfile

Dockerfile

• alpine 3.18

github-actions

.github/workflows/depup.yml

• actions/checkout v4
• reviewdog/action-depup v1
• peter-evans/create-pull-request v5
• actions/checkout v4
• reviewdog/action-depup v1
• peter-evans/create-pull-request v5

.github/workflows/dockerimage.yml

• actions/checkout v4

.github/workflows/release.yml

• actions/checkout v4
• haya14busa/action-bumpr v1
• haya14busa/action-update-semver v1
• haya14busa/action-cond v1
• actions/checkout v4
• haya14busa/action-bumpr v1

.github/workflows/reviewdog.yml

• actions/checkout v4
• haya14busa/action-cond v1
• reviewdog/action-shellcheck v1
• actions/checkout v4
• haya14busa/action-cond v1
• reviewdog/action-hadolint v1
• actions/checkout v4
• reviewdog/action-misspell v1
• actions/checkout v4
• reviewdog/action-alex v1

.github/workflows/test.yml

• actions/checkout v4
• actions/checkout v4
• actions/checkout v4

---

• Check this box to trigger a request for Renovate to run again on this repository