reviewdog/Run detect-secrets with reviewdog

🐶 Run detect-secrets with reviewdog on pull requests to improve code review experience.

Trust Signals

workflow.ymlSHA-pinned

uses: reviewdog/action-detect-secrets@ec0dde52d1644e27666856474a8cbc86032dcb8d # v0.29.7

tags can be moved; commit SHAs can't. why a SHA?

name	description	required	default
github_token	GITHUB_TOKEN	—	${{ github.token }}
name	Report name	—	detect-secrets
workdir	The directory from which to look for and run detect-secrets. Default: '.'	—	.
filter_mode	Reviewdog filter mode [added, diff_context, file, nofilter]	—	added
fail_level	If set to `none`, always use exit code 0 for reviewdog. Otherwise, exit code 1 for reviewdog if it finds at least 1 issue with severity greater than or equal to the given level. Possible values: [none,any,info,warning,error] Default is `none`.	—	none
fail_on_error	Deprecated, use `fail_level` instead. Whether reviewdog should fail when errors are found. [true,false] - This is useful for failing CI builds.	—	false
level	Report level for reviewdog [info,warning,error]	—	error
reporter	Reporter of reviewdog command [github-pr-check,github-pr-review,github-check]. Default is github-pr-check. github-pr-review can use Markdown and add a link to rule page in reviewdog reports.	—	github-pr-check
reviewdog_flags	Additional reviewdog flags	—	""
detect_secrets_flags	Flags and args of detect-secrets command. The default is '--all-files --force-use-all-plugins'.	—	--all-files --force-use-all-plugins
baseline_path	The baseline path to update. If not provided, a new baseline will be created.	—	""
skip_audited	Whether to skip secrets that have been audited. [true,false]	—	false
verbose	Whether to print verbose output. [true,false]	—	false

no outputs