You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -62,8 +64,8 @@ DevOps scanning tools (MSDO) in your own environment.</b><br>
62
64
<tableborder="1"cellpadding="5">
63
65
<tr><th>Workflow Name</th><th>Purpose</th></tr>
64
66
<tr><td><code>msdo-main-pipeline.yml</code></td><td>Orchestrates all security scans + uploads</td></tr>
65
-
<tr><td><code>msdo-reusable.yml</code></td><td>Performs MSDO scans on infra/code/containers</td></tr>
66
-
<tr><td><code>msdo-secret-scanning.yml</code></td><td>Runs <code>credscan</code> for secret detection</td></tr>
67
+
<tr><td><code>msdo-dynamic-scanning.yml</code></td><td>Performs MSDO scans on infra/code/containers</td></tr>
68
+
<tr><td><code>msdo-credscan.yml</code></td><td>Runs <code>credscan</code> with <code>.gdnsettings</code> config for secret detection</td></tr>
67
69
<tr><td><code>msdo-trufflehog.yml</code></td><td>Runs <code>Trufflehog</code> to detect passwords and secrets using entropy and regex-based rules</td></tr>
68
70
<tr><td><code>msdo-gitleaks.yml</code></td><td>Git-aware secret scanning using Gitleaks</td></tr>
69
71
<tr><td><code>upload-sarif action</code></td><td>Composite action to upload SARIF locally</td></tr>
0 commit comments