awslabs / dynein

DynamoDB CLI written in Rust.

https://github.com/awslabs/dynein

Apache License 2.0

360 stars 37 forks source link

chore: add a GitHub workflow for PRs to detect credential disclosures #215

Closed tmyoda closed 4 months ago

tmyoda commented 4 months ago

Issue #, if available:

206

Description of changes: This PR adds a GitHub workflow to detect credential disclosures using trufflehog.

An example execution: test PR: https://github.com/tmyoda/dynein/pull/6 Execution logs: https://github.com/tmyoda/dynein/actions/runs/8851931664/job/24309537599

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

tmyoda commented 4 months ago

Thank you for your review. I have fixed the 3 things you pointed out. Could you please take a look at this?

Changed the --no-verification option
Pinned the current latest version
Checkout only commits in the PR

Here is an example of the execution of this workflow. In this test PR, I have added git log command to show the commits to checkout. https://github.com/tmyoda/dynein/pull/8