lawndoc/ggshield workflow log secret scan
Scan workflow run logs for secrets using ggshield
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Maintainedlast commit Nov 17, 2025
- License
- MIT
Pinned Snippet
uses: lawndoc/ggshield-workflow-log-scan@0aace28f3bf271c9d264dcd358b11a4acad828eb # v1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| discord-webhook-url | Discord webhook URL to send alerts | yes | — |
| ggshield-token | GitGuardian ggshield token | yes | — |
| github-repository | GitHub repository in the format owner/repo | no | ${{ github.repository }} |
| github-token | A GitHub PAT used to fetch the workflow logs | no | ${{ github.token }} |
| workflow-run-attempt | Attempt number of the workflow run to scan | yes | — |
| workflow-run-id | Run ID of the workflow to scan | yes | — |
Outputs
no outputs