mirror of
https://github.com/JamesTurland/JimsGarage.git
synced 2026-07-26 18:38:14 +00:00
d5dadb5f4b
Add a GitHub Actions workflow that runs the project's pre-commit hooks against the files changed in each PR, plus a gitleaks secret scan over the PR's commits. Both block on findings. Enrich the existing .pre-commit-config.yaml with general hygiene checks and four linters (shellcheck, yamllint, actionlint, gitleaks), add a lenient yamllint config tuned for the repo's existing YAML, and add a gitleaks config that keeps the full default ruleset while baselining the repo's pre-existing intentional dummy credentials. Linting is scoped to changed files, so the checks pass on the current tree and only hold new or edited files to standard. - .github/workflows/lint.yml: pull_request workflow, read-only token, two jobs (pre-commit on changed files + gitleaks on the commit range) - .pre-commit-config.yaml: keep existing hooks; add hygiene checks, shellcheck (--severity=warning), yamllint, actionlint, gitleaks - .yamllint.yaml: lenient ruleset - .gitleaks.toml: default rules + allowlist for .env/example placeholders - .gitleaksignore: baseline of pre-existing intentional dummy credentials
42 lines
2.2 KiB
Plaintext
42 lines
2.2 KiB
Plaintext
# gitleaks baseline — pre-existing intentional dummy credentials kept here
|
|
# instead of an inline `# gitleaks:allow` annotation. A finding is baselined
|
|
# (rather than annotated inline) when its file cannot or should not be edited:
|
|
# - JSON files have no comment syntax (e.g. Netbird/management.json)
|
|
# - multi-line PEM private-key blocks can't carry a reliable inline marker
|
|
# (Authelia/Authelia/configuration.yml)
|
|
# - files with pre-existing lint debt: editing them would pull that file into
|
|
# the changed-files lint scope and fail unrelated yamllint/hygiene checks.
|
|
#
|
|
# New intentional dummies in clean, comment-capable files should use an inline
|
|
# `# gitleaks:allow` instead of being added here. See CONTRIBUTING.md.
|
|
|
|
Authelia/Authelia/configuration.yml:generic-api-key:19
|
|
Authelia/Authelia/configuration.yml:generic-api-key:226
|
|
Authelia/Authelia/configuration.yml:private-key:369
|
|
Authelia/Authelia/configuration.yml:generic-api-key:681
|
|
Authelia/Authelia/configuration.yml:private-key:790
|
|
Authelia/Authelia/configuration.yml:generic-api-key:872
|
|
Authelia/Authelia/configuration.yml:private-key:962
|
|
Authelia/Authelia/configuration.yml:private-key:1068
|
|
Authelia/Authelia/configuration.yml:private-key:1225
|
|
Authelia/Authelia/configuration.yml:generic-api-key:1267
|
|
Authelia/Authelia/configuration.yml:private-key:1314
|
|
Grafana-Monitoring/Part-2/telegraf.conf:generic-api-key:398
|
|
Home-Assistant/docker-compose.yaml:generic-api-key:43
|
|
Netbird/docker-compose.yml:generic-api-key:15
|
|
Netbird/docker-compose.yml:generic-api-key:16
|
|
Netbird/management.json:generic-api-key:19
|
|
Netbird/management.json:generic-api-key:30
|
|
Netbird/management.json:generic-api-key:35
|
|
Netbird/management.json:generic-api-key:52
|
|
Paperless-ngx/docker-compose.yaml:generic-api-key:83
|
|
Popup-Homelab/docker-compose.yaml:generic-api-key:87
|
|
Pterodactyl/config.yml:generic-api-key:3
|
|
Pterodactyl/config.yml:generic-api-key:4
|
|
Synapse/docker-compose.yaml:generic-api-key:57
|
|
Synapse/homeserver.yaml:generic-api-key:29
|
|
Synapse/mautrix-discord-bridge/docker-compose.yaml:generic-api-key:36
|
|
Terraform/providers.tf:generic-api-key:14
|
|
Vikunja/docker-compose.yaml:generic-api-key:13
|
|
Zitadel/docker-compose.yaml:generic-api-key:10
|