|
6 | 6 |
|
7 | 7 | jobs: |
8 | 8 | check: |
9 | | - name: Homogeneity Check (${{ matrix.os }}) |
| 9 | + name: Agent Secret Scan (${{ matrix.os }}) |
10 | 10 | runs-on: ${{ matrix.os }} |
11 | 11 | timeout-minutes: 10 |
12 | 12 |
|
13 | 13 | strategy: |
14 | 14 | matrix: |
15 | | - os: [ubuntu-22.04, macos-14, windows-latest] |
| 15 | + os: [ubuntu-22.04, macos-14, windows-2022] |
16 | 16 |
|
17 | 17 | steps: |
18 | 18 | - name: Checkout |
19 | 19 | uses: actions/checkout@v4 |
20 | 20 |
|
21 | 21 | - name: Install ripgrep (Ubuntu) |
22 | 22 | if: runner.os == 'Linux' |
23 | | - run: sudo apt-get install -y ripgrep |
| 23 | + run: | |
| 24 | + sudo apt-get update |
| 25 | + sudo apt-get install -y ripgrep |
24 | 26 |
|
25 | 27 | - name: Install ripgrep (macOS) |
26 | 28 | if: runner.os == 'macOS' |
27 | 29 | run: brew install ripgrep |
28 | 30 |
|
29 | | - - name: Install ripgrep (Windows) |
30 | | - if: runner.os == 'Windows' |
31 | | - run: choco install ripgrep -y |
32 | | - |
33 | | - - name: Run Homogeneity Check (Bash) |
| 31 | + - name: Run Agent Secret Scan (Bash) |
34 | 32 | if: runner.os != 'Windows' |
35 | | - run: bash scripts/check-homogeneity.sh $(basename "$GITHUB_WORKSPACE") |
| 33 | + run: bash scripts/scan-agent-secrets.sh --fail-on-high . |
36 | 34 |
|
37 | | - - name: Run Homogeneity Check (PowerShell) |
| 35 | + - name: Run Agent Secret Scan (PowerShell) |
38 | 36 | if: runner.os == 'Windows' |
39 | 37 | shell: pwsh |
40 | | - run: pwsh scripts/check-homogeneity.ps1 -WorkspaceName (Split-Path $env:GITHUB_WORKSPACE -Leaf) |
| 38 | + run: | |
| 39 | + & "${env:GITHUB_WORKSPACE}/scripts/scan-agent-secrets.ps1" ` |
| 40 | + -WorkspaceRoot "${env:GITHUB_WORKSPACE}" ` |
| 41 | + -FailOnHigh |
0 commit comments