feat: add secrets scanning

wayne-grant · wayne-grant · commit e70db4d111ea · 2023-06-16T10:04:14.000+01:00
diff --git a/.circleci/config.yml b/.circleci/config.yml
@@ -1,5 +1,8 @@
 version: 2.1
 
+orbs:
+  prodsec: snyk/prodsec-orb@1.0
+
 defaults: &defaults
   parameters:
     node_version:
@@ -87,6 +90,12 @@ workflows:
   version: 2
   test_and_release:
     jobs:
+      - prodsec/secrets-scan:
+          name: Scan repository for secrets
+          context:
+            - snyk-bot-slack
+          channel: os-team-managed-alerts
+
       - lint:
           name: lint
           context: nodejs-install
@@ -112,4 +121,4 @@ workflows:
           filters:
             branches:
               only:
-                - master
+                - master
diff --git a/.gitleaksignore b/.gitleaksignore
@@ -0,0 +1,3 @@
+c9fdda06e37173e730b2a6c5554d220e4ab74de2:test/fixtures/eigen/Podfile.lock:generic-api-key:525
+c9fdda06e37173e730b2a6c5554d220e4ab74de2:test/fixtures/eigen/Podfile.lock:generic-api-key:559
+c9fdda06e37173e730b2a6c5554d220e4ab74de2:test/fixtures/eigen/Podfile.lock:generic-api-key:593
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -0,0 +1,5 @@
+repos:
+  - repo: https://github.com/gitleaks/gitleaks
+    rev: v8.16.1
+    hooks:
+      - id: gitleaks

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+c9fdda06e37173e730b2a6c5554d220e4ab74de2:test/fixtures/eigen/Podfile.lock:generic-api-key:525`
	`2`	`+c9fdda06e37173e730b2a6c5554d220e4ab74de2:test/fixtures/eigen/Podfile.lock:generic-api-key:559`
	`3`	`+c9fdda06e37173e730b2a6c5554d220e4ab74de2:test/fixtures/eigen/Podfile.lock:generic-api-key:593`