hongming
ebe0f6280a
Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 6s
CI / Template validation (static) (pull_request) Successful in 16s
CI / Template validation (static) (push) Successful in 14s
verify-providers-projection / Regenerate projection, fail on drift, assert registry ⊆ template (pull_request) Successful in 30s
CI / Shell unit tests (pull_request) Successful in 13s
CI / Shell unit tests (push) Successful in 18s
CI / Template validation (runtime) (push) Successful in 4m49s
CI / Template validation (runtime) (pull_request) Successful in 4m51s
CI / T4 tier-4 conformance (live) (push) Successful in 4m51s
CI / T4 tier-4 conformance (live) (pull_request) Successful in 4m52s
CI / validate (push) Successful in 2s
CI / all-required (push) Successful in 1s
CI / validate (pull_request) Successful in 1s
CI / all-required (pull_request) Successful in 2s
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
17 lines
696 B
YAML
17 lines
696 B
YAML
# Secret scan via the canonical reusable in molecule-ci (CI-reusables
|
|
# consolidation). Replaces the inlined per-repo copy of this scanner with
|
|
# a native cross-repo workflow_call. Cross-repo uses resolves on Gitea
|
|
# 1.26.4 (proven on careful-bash#15). Pinned to a molecule-ci main SHA.
|
|
# Job `name:` preserved so the status context
|
|
# `Secret scan / Scan diff for credential-shaped strings` is unchanged.
|
|
name: Secret scan
|
|
on:
|
|
pull_request:
|
|
types: [opened, synchronize, reopened]
|
|
push:
|
|
branches: [main, staging]
|
|
jobs:
|
|
scan:
|
|
name: Scan diff for credential-shaped strings
|
|
uses: molecule-ai/molecule-ci/.gitea/workflows/secret-scan.yml@7b2d4de108a8696344cd54fd783caa4d1ad682bc
|