gitleaks / gitleaks/gitleaks-action

gitleaks flags into the github action

Open
#161 3 comments 1 reaction 0 assignees View on GitHub
Dominant language
JavaScript
Stars
644
Forks
194
PR merge metrics
No merged PRs in 30d

Description

Is it not possible to include the **flags** into the Github Action like below?

```
- name: Validate
uses: gitleaks/gitleaks-action@v2
with:
args: "--config=custom_path/.gitleaks.toml --log-opts=main"
```

Nothing happens with the above code. However, if I directly run the `gitleaks detect` with the above **flags** it works.

`gitleaks detect --verbose --config=custom_path/.gitleaks.toml --log-opts=main`

Contributor guide

Open the contributing guide

Research direction

Start with the gitleaks/gitleaks-action@v2 entry point and trace how the with.args value is handled. Compare the action workflow using --config and --log-opts with the direct gitleaks detect command, then verify that the supplied flags affect the action's scan as expected.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions, javascript
Domain
ci-cd, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.