Files
molecule-ai-workspace-templ…/.gitea/workflows/secret-scan.yml
T
hongming b5b578ab74
Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 8s
CI / Template validation (static) (pull_request) Successful in 6s
CI / Adapter unit tests (pull_request) Successful in 7s
verify-providers-projection / Regenerate projection, fail on drift, assert registry ⊆ template (pull_request) Successful in 19s
CI / Template validation (runtime) (pull_request) Successful in 2m5s
CI / T4 tier-4 conformance (live) (pull_request) Successful in 2m5s
CI / validate (pull_request) Successful in 2s
ci: adopt canonical secret-scan reusable via cross-repo uses
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-04 20:17:02 -07:00

17 lines
699 B
YAML

# Secret scan via the canonical reusable in molecule-ci (CI-reusables
# consolidation). Replaces the inlined per-repo copy with a native
# cross-repo workflow_call. Resolves on Gitea 1.26.4; proven green on
# molecule-ai-workspace-template-hermes#146. Pinned to a molecule-ci SHA.
# Job `name:` preserved so the required status context
# `Secret scan / Scan diff for credential-shaped strings` is unchanged.
name: Secret scan
on:
pull_request:
types: [opened, synchronize, reopened]
push:
branches: [main, staging]
jobs:
scan:
name: Scan diff for credential-shaped strings
uses: molecule-ai/molecule-ci/.gitea/workflows/secret-scan.yml@7b2d4de108a8696344cd54fd783caa4d1ad682bc