Merge pull request #553 from mbaldessari/leaks2

Improve the gitleaks configuration

Author: mbaldessari

.github/linters/.gitleaks.toml

@@ -0,0 +1,11 @@
+[allowlist]
+paths = [
+  '''.*\.html$''',
+  '''content\/patterns\/ansible-edge-gitops-kasten\/ideas-for-customization\.md''',
+]
+
+regexes = [
+  # Ignore lines containing these
+  '''oc login''',
+  '''sha256~AUv_4DGQoFMVzmdO3cg3v4vnUuaV3lYcy6N2SCwVOz4''',
+]

.github/workflows/superlinter.yml

@@ -0,0 +1,30 @@
+---
+name: Super linter
+
+on: [push, pull_request]
+
+jobs:
+  build:
+    # Name the Job
+    name: Super linter
+    # Set the agent to run on
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v4
+        with:
+          # Full git history is needed to get a proper list of changed files within `super-linter`
+          fetch-depth: 0
+
+      ################################
+      # Run Linter against code base #
+      ################################
+      - name: Lint Code Base
+        uses: super-linter/super-linter/slim@v7
+        env:
+          VALIDATE_ALL_CODEBASE: true
+          DEFAULT_BRANCH: main
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          # These are the validation we disable atm
+          VALIDATE_GITLEAKS: true

.gitleaks.toml

@@ -0,0 +1 @@
+.github/linters/.gitleaks.toml

.gitleaks.toml

@@ -70,3 +70,13 @@ lintwordlist: ## Sorts and removes duplicates from spellcheck exception file .wo
 .PHONY: clean
 clean: ## Removes any unneeded spurious files
 	@rm -rvf ./.jekyll-cache ./_site ./tmp super-linter.log dictionary.dic public/*
+
+.PHONY: super-linter
+super-linter: ## Runs super linter locally
+	rm -rf .mypy_cache
+	podman run -e RUN_LOCAL=true -e USE_FIND_ALGORITHM=true	\
+					-e VALIDATE_GITLEAKS=true \
+					$(DISABLE_LINTERS) \
+					-v $(PWD):/tmp/lint:rw,z \
+					-w /tmp/lint \
+					ghcr.io/super-linter/super-linter:slim-v7

Makefile

@@ -249,7 +249,7 @@ $ cd /path/to/your/repository
 +
 [source,terminal]
 ----
-$ oc login --token=sha256~AUv_4DGQoFMVzmdO3cg3v4vnUuaV3lYcy6N2SCwVOz4 --server=https://api.<your-cluster>.<domain>:6443
+$ oc login --token=<retrieved-token> --server=https://api.<your-cluster>.<domain>:6443
 ----
 
 . Alternatively log in by running the following command: