security.yml

name: 💂 Security

on: [push, pull_request]

jobs:
  gitguardian_scan:
    name: 🦉 GitGuardian Scan
    strategy:
      matrix:
        os:
          - ubuntu-latest
    runs-on: ${{ matrix.os }}
    steps:
      - name: 🛫 Checkout
        uses: actions/checkout@v4
      - name: 🔎 GitGuardian Scanning
        uses: GitGuardian/gg-shield-action@master
        env:
          GITHUB_PUSH_BEFORE_SHA: ${{ github.event.before }}
          GITHUB_PUSH_BASE_SHA: ${{ github.event.before }}
          GITHUB_PULL_BASE_SHA: ${{ github.event.pull_request.base.sha }}
          GITHUB_DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
          GITGUARDIAN_API_KEY: ${{ secrets.GITGUARDIAN_API_KEY }}
  trufflehog_scan:
    name: 🐗 Trufflehog Scan
    strategy:
      matrix:
        os:
          - ubuntu-latest
    runs-on: ${{ matrix.os }}
    steps:
      - name: 🛫 Checkout
        uses: actions/checkout@v4
      - name: 🔎 Trufflehog Scanning
        uses: trufflesecurity/trufflehog@main