common/.gitlab/gitleaks.yaml

16 lines
331 B
YAML

---
# gitleaks
gitleaks:
stage: "gitleaks"
image:
name: "gitleaks/gitleaks:latest"
rules:
# run only on push to default branch
- if: '$CI_PIPELINE_SOURCE == "push" && $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH'
- when: "never"
# start linting
script:
- "gitleaks detect --source . --verbose --redact"