fix: run gitleaks and grype on prs (#3332)

Signed-off-by: Carlos A Becker caarlos0@users.noreply.github.com Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
goreleaser · Aug 21, 2022 · 85cb047 · 85cb047
1 parent 817369a
commit 85cb047
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 3 deletions.
diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
@@ -2,8 +2,9 @@ name: gitleaks
 
 on:
   push:
-    branches:
-      - 'main'
+    branches: ['main']
+    tags: ['v*']
+  pull_request:
 
 
 permissions:
@@ -14,6 +15,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v3
+        with:
+          fetch-depth: 0
       - uses: gitleaks/gitleaks-action@v2
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

diff --git a/.github/workflows/grype.yml b/.github/workflows/grype.yml
@@ -2,7 +2,9 @@ name: "grype"
 
 on:
   push:
-    branches: [ main ]
+    branches: ['main']
+    tags: ['v*']
+  pull_request:
 
 jobs:
   scan-source:

diff --git a/.gitleaks.toml b/.gitleaks.toml
@@ -0,0 +1,5 @@
+[[rules]]
+id = "ignore-testdata"
+[rules.allowlist]
+paths = ['''.*/testdata/*''']
+