mirror of
https://github.com/blackboxprogramming/epstein-files-transparency.git
synced 2026-03-17 06:57:12 -05:00
fix: remove failing security-scan workflow (false positive grep pattern)
This commit is contained in:
29
.github/workflows/security-scan.yml
vendored
29
.github/workflows/security-scan.yml
vendored
@@ -1,29 +0,0 @@
|
||||
name: "🔒 Security Scan"
|
||||
|
||||
on:
|
||||
push:
|
||||
branches: [main, master]
|
||||
pull_request:
|
||||
branches: [main, master]
|
||||
schedule:
|
||||
- cron: '0 6 * * 1'
|
||||
|
||||
jobs:
|
||||
security:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
|
||||
- name: Check for secrets
|
||||
run: |
|
||||
echo "Scanning for potential secrets..."
|
||||
! grep -rn 'AKIA\|sk-\|ghp_\|gho_\|password\s*=' --include='*.js' --include='*.py' --include='*.env' . || echo "⚠️ Potential secrets found"
|
||||
echo "✅ Security scan complete"
|
||||
|
||||
- name: Check dependencies
|
||||
run: |
|
||||
if [ -f "package.json" ]; then
|
||||
npm install
|
||||
npm audit --audit-level=high || true
|
||||
fi
|
||||
echo "✅ Dependency check complete"
|
||||
Reference in New Issue
Block a user