Skip to content

Infisical secrets check

Actions
Run Infisical secrets check on a GitHub repository
v1.1.26
Latest
Star (2)

GitHub Infisical secrets check Action

GitHub repo GitHub last commit GitHub license

CI wakatime

🚨 :octocat: A GitHub action to check and report secret leaks in the repository using Infisical CLI.


Usage

The following workflow step will scan for secret leaks in your repository.

  - name: Run the action
    uses: guibranco/github-infisical-secrets-check-action@latest
    id: secrets-scan

Inputs


Outputs

  • secrets-leaked: The number of secrets leaked found by the Infisical CLI tool.

Example

With default (inherited) GitHub token

name: 'Infisical secrets check'

on:
  pull_request:

  jobs:
    check-secrets:
      runs-on: ubuntu-latest
      permissions:
        contents: read
        pull-requests: write

      steps:
        - uses: actions/checkout@v4
          
        - name: Run the action
          uses: guibranco/github-infisical-secrets-check-action@latest

With a custom GitHub token

name: 'Infisical secrets check'

on:
  pull_request:

  jobs:
    check-secrets:
      runs-on: ubuntu-latest
      permissions:
        contents: read
        pull-requests: write

      steps:
        - uses: actions/checkout@v4
          
        - name: Run the action
          uses: guibranco/github-infisical-secrets-check-action@latest
          with:
            gh_token: ${{ secrets.GH_TOKEN }}

Remember to add the repository secret GH_TOKEN.


Sample output

Success - ✅ No secrets leaked

success

Failure - 🚨 Secrets leaked!

failure

Infisical secrets check is not certified by GitHub. It is provided by a third-party and is governed by separate terms of service, privacy policy, and support documentation.

About

Run Infisical secrets check on a GitHub repository
v1.1.26
Latest

Infisical secrets check is not certified by GitHub. It is provided by a third-party and is governed by separate terms of service, privacy policy, and support documentation.