Skip to content

README.md

Latest commit

 

History

History
24 lines (16 loc) · 604 Bytes

README.md

File metadata and controls

24 lines (16 loc) · 604 Bytes

gh-workflows

Reusable GitHub Actions workflows for the Journee organization.

Available Workflows

Secret Scan (secret-scan.yml)

Scans PR diffs for leaked tokens, secrets, and credentials using TruffleHog.

Usage — add this to .github/workflows/secret-scan.yml in your repo:

name: Secret Scan
on:
  pull_request:
    branches: [main]

jobs:
  trufflehog:
    uses: journee-live/gh-workflows/.github/workflows/secret-scan.yml@main

Then enforce it as a required status check via branch protection or an org-level ruleset.