Add gitleaks scan to CI (#109)

apollographql · Oct 16, 2023 · 76c5247 · 76c5247
1 parent 2b57a1a
commit 76c5247
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/.circleci/config.yml b/.circleci/config.yml
@@ -1,5 +1,8 @@
 version: 2.1
 
+orbs:
+  secops: apollo/circleci-secops-orb@2.0.0
+
 executors:
   node:
     docker:
@@ -68,3 +71,12 @@ workflows:
       - lint
       - typescript
       - test-unit
+  security-scans:
+    jobs:
+      - secops/gitleaks:
+          context:
+            - platform-docker-ro
+            - github-orb
+            - secops-oidc
+          git-base-revision: <<#pipeline.git.base_revision>><<pipeline.git.base_revision>><</pipeline.git.base_revision >>
+          git-revision: << pipeline.git.revision >>