From 7a4ca76957b65373c08c57a7032008ee4c4e3082 Mon Sep 17 00:00:00 2001
From: Paul Schneider <paul@pschneider.fr>
Date: Mon, 7 Sep 2026 12:08:57 +0100
Subject: [PATCH] picket scan

---
 .forgejo/workflows/buildAndTest.yml |  7 ++++---
 dotnet-tools.json                   | 10 +++++++++-
 2 files changed, 13 insertions(+), 4 deletions(-)

diff --git a/.forgejo/workflows/buildAndTest.yml b/.forgejo/workflows/buildAndTest.yml
index 786bccf4c..2d135474a 100644
--- a/.forgejo/workflows/buildAndTest.yml
+++ b/.forgejo/workflows/buildAndTest.yml
@@ -41,9 +41,10 @@ jobs:
         git submodule update --init --recursive
         echo "✅ Checked out at $(git rev-parse HEAD) on $(git branch --show-current 2>/dev/null || echo detached HEAD)"
     - name: Secret scan
-      uses: actions/secret-scan-action@v1
-      with:
-        install_scanners: true
+      run: |
+        echo "🔍 Scanning for secrets..."
+        cd /src/_src && dotnet tool restore && dotnet picket protect --verbose --redact --exit-code 1 \
+          && echo "✅ Success !" || echo "❌ Fail ($?)!"
     - name: Test
       run: |
         echo "🚀 Lancement des tests..."
diff --git a/dotnet-tools.json b/dotnet-tools.json
index b0e38abda..1762a89de 100644
--- a/dotnet-tools.json
+++ b/dotnet-tools.json
@@ -1,5 +1,13 @@
 {
   "version": 1,
   "isRoot": true,
-  "tools": {}
+  "tools": {
+    "picket": {
+      "version": "0.2.12",
+      "commands": [
+        "picket"
+      ],
+      "rollForward": false
+    }
+  }
 }
\ No newline at end of file