Skip to content

Enhance and refactor Gitleaks workflow with config validation#8

Merged
hel-isa merged 3 commits into
hel-isa-patch-1from
main
Mar 28, 2026
Merged

Enhance and refactor Gitleaks workflow with config validation#8
hel-isa merged 3 commits into
hel-isa-patch-1from
main

Conversation

@hel-isa

@hel-isa hel-isa commented Mar 28, 2026

Copy link
Copy Markdown
Owner

This pull request improves the Gitleaks integration in the .github/workflows/reusable-secrets.yml workflow by ensuring a config file is always present, adding stricter shell error handling, and making the Gitleaks execution more robust. The main changes are grouped below:

Gitleaks Configuration and Execution Enhancements:

  • Added a step to check for the existence of the Gitleaks config file at the path specified by inputs.config_path. If the config file does not exist, a default configuration is created with sensible allowlist paths.
  • Introduced set -euo pipefail at the start of relevant shell script steps to enforce stricter error checking and halt on errors or unset variables.
  • Updated the Gitleaks run command to use multi-line formatting for better readability and maintainability.

Reporting Improvements:

  • Minor formatting changes in the Python snippet that counts Gitleaks findings to improve readability.

hel-isa added 3 commits March 27, 2026 20:18
Update reusable-dashboard workflow reference to main
Refactor Gitleaks workflow to ensure config exists and create default if missing.
Enhance Gitleaks workflow with config validation
@hel-isa hel-isa merged commit bbb4bdf into hel-isa-patch-1 Mar 28, 2026
8 of 13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant