c9c3fc94f8
Some checks failed
- Add secret-leak detection CI workflow (secret-scan.yml) - Add dependency vulnerability scanning via pip-audit (dependency-audit.yml) - Add CODEOWNERS for critical paths (gateway/, tools/, agent/, config/) - Add security PR checklist issue template - Add quarterly security audit scheduled workflow - Add pre-commit config with gitleaks and private key detection Refs #149
26 lines
737 B
YAML
26 lines
737 B
YAML
repos:
|
|
# Secret detection
|
|
- repo: https://github.com/gitleaks/gitleaks
|
|
rev: v8.21.2
|
|
hooks:
|
|
- id: gitleaks
|
|
name: Detect secrets with gitleaks
|
|
description: Detect hardcoded secrets, API keys, and credentials
|
|
|
|
# Basic security hygiene
|
|
- repo: https://github.com/pre-commit/pre-commit-hooks
|
|
rev: v5.0.0
|
|
hooks:
|
|
- id: check-added-large-files
|
|
args: ['--maxkb=500']
|
|
- id: detect-private-key
|
|
name: Detect private keys
|
|
- id: check-merge-conflict
|
|
- id: check-yaml
|
|
- id: check-toml
|
|
- id: end-of-file-fixer
|
|
- id: trailing-whitespace
|
|
args: ['--markdown-linebreak-ext=md']
|
|
- id: no-commit-to-branch
|
|
args: ['--branch', 'main']
|