poorneshorg/SecretScan and Upload
Runs Gitleaks scan on PR diffs with custom rules and uploads results to DefectDojo
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Maintainedlast commit Aug 21, 2025
- License
- None
Pinned Snippet
uses: poorneshorg/gitleaks-scan@f5487b93829dd0678d4a428fba35d10a834b801e # no releases — HEAD as of 2026-07-11tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| token | GitHub token with read:packages access (needed for GHCR login) | yes | — |
| dojo-url | DefectDojo instance URL | yes | — |
| dojo-api-key | API key for DefectDojo | yes | — |
| product-name | DefectDojo product name | yes | — |
| report-file | Path to Gitleaks JSON output | no | gitleaks-report.json |
| repo-name | Repository name | yes | — |
| branch-name | Branch name (used as test title) | yes | — |
Outputs
no outputs