From 1cf3c689d883a7b6382cf1209acb8f79557d0eb4 Mon Sep 17 00:00:00 2001 From: Paul Schneider Date: Thu, 24 Sep 2026 14:50:28 +0100 Subject: [PATCH 1/3] Secret scan --- .forgejo/workflows/buildAndTest.yml | 2 +- contrib/Makefile | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/.forgejo/workflows/buildAndTest.yml b/.forgejo/workflows/buildAndTest.yml index f3c928ee0..120ccf259 100644 --- a/.forgejo/workflows/buildAndTest.yml +++ b/.forgejo/workflows/buildAndTest.yml @@ -44,7 +44,7 @@ jobs: - name: Secret scan run: | echo "🔍 Scanning for secrets..." - cd /src/_src && dotnet tool restore && dotnet picket git --verbose --redact --exit-code 1 --log-opts -n10 \ + cd /src/_src && dotnet tool restore && dotnet picket git --verbose --redact --exit-code 1 --log-opts main..HEAD \ - name: Build run: | echo "🏗️ Building the solution..." diff --git a/contrib/Makefile b/contrib/Makefile index 4e4ef4df6..05c3d3218 100644 --- a/contrib/Makefile +++ b/contrib/Makefile @@ -1,6 +1,8 @@ APP_PROJECT_NAMES=Org Blogs Api SLNDIR=.. +MAIN_SECRET="***REMOVED***" + include $(SLNDIR)/.env include .env From f0d262cb372911288890cebf61e5879d2d409021 Mon Sep 17 00:00:00 2001 From: Paul Schneider Date: Mon, 7 Sep 2026 12:20:55 +0100 Subject: [PATCH 2/3] test --- .pre-commit-config.yaml | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 .pre-commit-config.yaml diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml new file mode 100644 index 000000000..168ff1424 --- /dev/null +++ b/.pre-commit-config.yaml @@ -0,0 +1,6 @@ +repos: + - repo: https://github.com/gitleaks/gitleaks + rev: v8.24.2 + hooks: + - id: gitleaks + From 2c36d880e106a34b4d0fbf2484beb6c187233539 Mon Sep 17 00:00:00 2001 From: Paul Schneider Date: Mon, 7 Sep 2026 12:56:48 +0100 Subject: [PATCH 3/3] Gitleaks integration --- contrib/Makefile | 2 -- 1 file changed, 2 deletions(-) diff --git a/contrib/Makefile b/contrib/Makefile index 05c3d3218..4e4ef4df6 100644 --- a/contrib/Makefile +++ b/contrib/Makefile @@ -1,8 +1,6 @@ APP_PROJECT_NAMES=Org Blogs Api SLNDIR=.. -MAIN_SECRET="***REMOVED***" - include $(SLNDIR)/.env include .env