From 40d26df97a8a0b6252b4ef778f3fb17c76e7756e Mon Sep 17 00:00:00 2001 From: pedro Date: Fri, 8 May 2026 10:53:36 +0100 Subject: [PATCH] ativar gitleaks --- .gitea/workflows/deploy.yaml | 10 ++++++++++ forcar_trigger.txt | 2 +- 2 files changed, 11 insertions(+), 1 deletion(-) diff --git a/.gitea/workflows/deploy.yaml b/.gitea/workflows/deploy.yaml index 6f50da8..6f0c8dd 100644 --- a/.gitea/workflows/deploy.yaml +++ b/.gitea/workflows/deploy.yaml @@ -12,7 +12,17 @@ jobs: with: fetch-depth: 0 +<<<<<<< HEAD # 1. SCA - Verifica vulnerabilidades no Nginx +======= + # 1. SECRET SCANNING (Desativado temporariamente) + - name: Gitleaks Scan + run: | + curl -sL https://github.com/gitleaks/gitleaks/releases/download/v8.18.2/gitleaks_8.18.2_linux_x64.tar.gz | tar -xz -C /tmp + /tmp/gitleaks detect --source . --verbose --redact --exit-code 1 + + # 2. SCA - Verifica vulnerabilidades no Nginx +>>>>>>> 8c9be4c (ativar gitleaks) - name: Scan Docker Image Vulnerabilities (Trivy) run: | curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin diff --git a/forcar_trigger.txt b/forcar_trigger.txt index bbe9429..68a7b47 100644 --- a/forcar_trigger.txt +++ b/forcar_trigger.txt @@ -1 +1 @@ -"atualizacao-pipeline" +"atualizacao-pipelines"