Create trigger.yaml #100
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: pr | |
| on: | |
| pull_request: | |
| workflow_dispatch: | |
| push: | |
| branches: | |
| - main | |
| jobs: | |
| secret_check: | |
| name: secret_check | |
| runs-on: ubuntu-latest | |
| steps: | |
| # Checkout your repository under $GITHUB_WORKSPACE, so your job can access it | |
| - name: Checkout Repository | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| - name: for the first ever commit | |
| shell: bash | |
| run: | | |
| curl -sfL 'https://raw.githubusercontent.com/orcasecurity/orca-cli/main/install.sh' | bash -s | |
| orca-cli -p default --api-token ${{ secrets.ORCA_SECURITY_API_TOKEN }} secrets scan --path . --from-commit 03f6689796b4c982812be8b40ba53811830bb164 | |
| - name: from-commit no such commit | |
| if: always() | |
| shell: bash | |
| run: | | |
| curl -sfL 'https://raw.githubusercontent.com/orcasecurity/orca-cli/main/install.sh' | bash -s | |
| orca-cli -p default --api-token ${{ secrets.ORCA_SECURITY_API_TOKEN }} secrets scan --path . --from-commit 03f6689796b4c982812be8b40ba53811830bb163 | |
| - name: from-commit no such commit | |
| - name: from-commit no commit at all | |
| if: always() | |
| shell: bash | |
| run: | | |
| curl -sfL 'https://raw.githubusercontent.com/orcasecurity/orca-cli/main/install.sh' | bash -s | |
| orca-cli -p default --api-token ${{ secrets.ORCA_SECURITY_API_TOKEN }} secrets scan --path . --from-commit | |
| - name: to-commit | |
| if: always() | |
| shell: bash | |
| run: | | |
| curl -sfL 'https://raw.githubusercontent.com/orcasecurity/orca-cli/main/install.sh' | bash -s | |
| orca-cli -p default --api-token ${{ secrets.ORCA_SECURITY_API_TOKEN }} secrets scan --path . --to-commit 040ffa9afbbcb054ae839b8e56815487522cffae | |
| - name: from-commit to-commit same commit | |
| if: always() | |
| shell: bash | |
| run: | | |
| curl -sfL 'https://raw.githubusercontent.com/orcasecurity/orca-cli/main/install.sh' | bash -s | |
| orca-cli -p default --api-token ${{ secrets.ORCA_SECURITY_API_TOKEN }} secrets scan --path . --from-commit 040ffa9afbbcb054ae839b8e56815487522cffae --to-commit b02f437f1bc43cf8af34cf6d16d47614296230f7 | |
| - name: from-commit to-commit oppiste | |
| if: always() | |
| shell: bash | |
| run: | | |
| curl -sfL 'https://raw.githubusercontent.com/orcasecurity/orca-cli/main/install.sh' | bash -s | |
| orca-cli -p default --api-token ${{ secrets.ORCA_SECURITY_API_TOKEN }} secrets scan --path . --from-commit f01d2f6b68821fe3fdae8984fa8cbe68378f1d08 --to-commit 5a7e202bc669aa05353d7f7dd17770950a5f9078 | |
| - name: full history | |
| if: always() | |
| shell: bash | |
| run: | | |
| git config --global fetch.prune false | |
| git fetch --all | |
| git reflog | |
| git branch -a | |
| curl -sfL 'https://raw.githubusercontent.com/orcasecurity/orca-cli/main/install.sh' | bash -s | |
| orca-cli -p default --api-token ${{ secrets.ORCA_SECURITY_API_TOKEN }} secrets scan --path . --ignore-git-history-baseline |