chore: add ggshield to CI and pre-commit (#73)

Co-authored-by: Séverine Bonnechère <[email protected]>

Author: sevbch

.github/workflows/ci.yaml

@@ -46,3 +46,19 @@ jobs:
           else
             bash -c "yarn test"
           fi
+
+  scanning:
+    name: GitGuardian scan
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0 # fetch all history so multiple commits can be scanned
+      - name: GitGuardian scan
+        uses: GitGuardian/ggshield-action@v1
+        env:
+          GITHUB_PUSH_BEFORE_SHA: ${{ github.event.before }}
+          GITHUB_PUSH_BASE_SHA: ${{ github.event.base }}
+          GITHUB_DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
+          GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }}

.pre-commit-config.yaml

@@ -28,3 +28,10 @@ repos:
     hooks:
       - id: codespell
         exclude: ^(ggshield-internal)
+
+  - repo: https://github.com/gitguardian/ggshield
+    rev: v1.36.0
+    hooks:
+      - id: ggshield
+        language_version: python3
+        stages: [pre-commit]