dariuszporowski/Gitleaks Scanner
Run Gitleaks in your CI/CD workflow
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| source | Path to source (relative to $GITHUB_WORKSPACE) (default: $GITHUB_WORKSPACE) | no | — |
| config | Config file path (relative to $GITHUB_WORKSPACE) (default build-in: /.gitleaks/UDMSecretChecks.toml) | no | /.gitleaks/UDMSecretChecks.toml |
| report_format | Report file format: json, csv, sarif (default: json) | no | json |
| no_git | Treat git repos as plain directories and scan those file (default: <not set>) | no | — |
| baseline_path | Path to baseline with issues that can be ignored (relative to $GITHUB_WORKSPACE) (default: <not set>) | no | — |
| redact | Redact secrets from logs and stdout (default: true) | no | true |
| fail | Fail if secrets founded (default: true) | no | true |
| verbose | Show verbose output from scan (default: true) | no | true |
| log_level | Log level (trace, debug, info, warn, error, fatal) (default: info) | no | info |
| exit_code | Exit code when leaks have been encountered (default 1) | no | 1 |
| log_opts | Git log options (default: <not set>) | no | — |
| max_decode_depth | Allow recursive decoding up to this depth (default 0, no decoding is done) | no | 0 |
| follow_symlinks | Scan files that are symlinks to other files (default: false) | no | false |
Outputs
| name | description |
|---|---|
| exitcode | Success for failure value from scan |
| result | Gitleaks result summary |
| output | Gitleaks log output |
| command | Gitleaks executed command |
| report | Report file path |