test: gitleaks

.github/workflows/gitleaks.yaml

@@ -0,0 +1,10 @@
+name: gitleaks-scan
+on:
+  workflow_dispatch:
+  push:
+jobs:
+  gitleaks-scan:
+    uses: button-inc/button-shared-gh-actions/.github/workflows/scan-code-gitleaks.yml@develop
+  secrets:
+    github-token: ${{ secrets.GITHUB_TOKEN }}
+    gitleaks-license: ${{ secrets.GITLEAKS_LICENSE}}

.github/workflows/owasp.yaml

@@ -1,7 +1,7 @@
 name: zap-scan
 on:
   workflow_dispatch:
-  push:
+    # push:
 jobs:
   zap-scan:
     uses: button-inc/button-shared-gh-actions/.github/workflows/scan-code-owasp-zap.yml@develop

.github/workflows/sonarcloud.yaml

@@ -1,7 +1,7 @@
 name: sonarcloud-scan
 on:
   workflow_dispatch:
-  push:
+    # push:
 jobs:
   sonarcloud-scan:
     uses: button-inc/button-shared-gh-actions/.github/workflows/scan-code-sonarcloud.yml@develop

.github/workflows/test-code.yaml

@@ -76,12 +76,12 @@ jobs:
   gitleaks:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - run: ./.bin/install-gitleaks-linux-x64.sh
-      - run: ./gitleaks detect --exit-code 0 --report-format sarif --report-path "gitleaks.sarif"
-      - uses: github/codeql-action/upload-sarif@v2
-        with:
-          sarif_file: 'gitleaks.sarif'
+      uses: ./.github/workflows/gitleaks.yaml
+      # - run: ./.bin/install-gitleaks-linux-x64.sh
+      # - run: ./gitleaks detect --exit-code 0 --report-format sarif --report-path "gitleaks.sarif"
+      # - uses: github/codeql-action/upload-sarif@v2
+      #   with:
+      #     sarif_file: 'gitleaks.sarif'
 
   jest:
     needs: [install-test-env]

.github/workflows/trivy.yaml

@@ -1,7 +1,7 @@
 name: trivy-scan
 on:
   workflow_dispatch:
-  push:
+    # push:
 jobs:
   trivy-scan:
     uses: button-inc/button-shared-gh-actions/.github/workflows/scan-code-trivy.yml@develop