gitleaks.yaml

package:
  name: gitleaks
  version: 8.21.2
  epoch: 1
  description: SAST tool for detecting and preventing hardcoded secrets like passwords, api keys, and tokens in git repos
  copyright:
    - license: MIT

environment:
  contents:
    packages:
      - build-base
      - busybox
      - ca-certificates-bundle
      - git
      - go
      - openssf-compiler-options

pipeline:
  - uses: git-checkout
    with:
      repository: https://github.com/gitleaks/gitleaks
      expected-commit: 43fae355e6fe4d99d2a7b240a224b85e2903aeb4
      tag: v${{package.version}}

  - runs: |
      make build
      mkdir -p ${{targets.destdir}}/usr/bin
      mv gitleaks ${{targets.destdir}}/usr/bin/gitleaks

  - uses: strip

update:
  enabled: true
  github:
    identifier: gitleaks/gitleaks
    strip-prefix: v
    use-tag: true
    tag-filter: v

test:
  pipeline:
    - runs: |
        gitleaks version
        gitleaks --version
        gitleaks --help