mirror of
https://github.com/blackboxprogramming/epstein-files-transparency.git
synced 2026-03-17 06:57:12 -05:00
fix: remove failing security-scan workflow (false positive grep pattern)
This commit is contained in:
29
.github/workflows/security-scan.yml
vendored
29
.github/workflows/security-scan.yml
vendored
@@ -1,29 +0,0 @@
|
|||||||
name: "🔒 Security Scan"
|
|
||||||
|
|
||||||
on:
|
|
||||||
push:
|
|
||||||
branches: [main, master]
|
|
||||||
pull_request:
|
|
||||||
branches: [main, master]
|
|
||||||
schedule:
|
|
||||||
- cron: '0 6 * * 1'
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
security:
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- uses: actions/checkout@v4
|
|
||||||
|
|
||||||
- name: Check for secrets
|
|
||||||
run: |
|
|
||||||
echo "Scanning for potential secrets..."
|
|
||||||
! grep -rn 'AKIA\|sk-\|ghp_\|gho_\|password\s*=' --include='*.js' --include='*.py' --include='*.env' . || echo "⚠️ Potential secrets found"
|
|
||||||
echo "✅ Security scan complete"
|
|
||||||
|
|
||||||
- name: Check dependencies
|
|
||||||
run: |
|
|
||||||
if [ -f "package.json" ]; then
|
|
||||||
npm install
|
|
||||||
npm audit --audit-level=high || true
|
|
||||||
fi
|
|
||||||
echo "✅ Dependency check complete"
|
|
||||||
Reference in New Issue
Block a user