Added gitleaks in PR-Checks (#4649)

Jonsy13 · web-flow · commit d1c63b8454c6 · 2024-05-16T14:29:00.000+05:30
* Added gitleaks in PR-Check

Signed-off-by: Jonsy13 &lt;vedant.shrotria@harness.io&gt;

* Added gitleaks in PR-Check

Signed-off-by: Jonsy13 &lt;vedant.shrotria@harness.io&gt;

* Added gitleaks in PR-Check

Signed-off-by: Jonsy13 &lt;vedant.shrotria@harness.io&gt;

* Added gitleaks in PR-Check

Signed-off-by: Jonsy13 &lt;vedant.shrotria@harness.io&gt;

* Added gitleaks in PR-Check

Signed-off-by: Jonsy13 &lt;vedant.shrotria@harness.io&gt;

---------

Signed-off-by: Jonsy13 &lt;vedant.shrotria@harness.io&gt;
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -41,6 +41,18 @@ jobs:
             # dex-server:
             #   - 'chaoscenter/dex-server/**'
 
+  gitleaks-scan:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+      - name: Run GitLeaks
+        run: |
+          wget https://github.com/gitleaks/gitleaks/releases/download/v8.18.2/gitleaks_8.18.2_linux_x64.tar.gz && \
+          tar -zxvf gitleaks_8.18.2_linux_x64.tar.gz && \
+          sudo mv gitleaks /usr/local/bin && gitleaks detect --source . -v
+
   backend-checks:
     runs-on: ubuntu-latest
     needs: changes
diff --git a/.gitleaksignore b/.gitleaksignore
@@ -0,0 +1,17 @@
+57748d7e930664094c76ae6b02577db2ce3955fa:mkdocs/docs/auth/v3.0.0/auth-api.json:jwt:140
+57748d7e930664094c76ae6b02577db2ce3955fa:mkdocs/docs/auth/v3.0.0/auth-api.json:jwt:185
+57748d7e930664094c76ae6b02577db2ce3955fa:mkdocs/docs/auth/v3.0.0/auth-api.json:jwt:278
+28f9079f4a1909f277a47f0d45be1f82a84de27d:mkdocs/docs/auth/v3.0.0/auth-api.json:jwt:46
+cd1841bb0d83decc0ab0f09ddda69cc572c50da9:auth/api.html:jwt:293
+cd1841bb0d83decc0ab0f09ddda69cc572c50da9:auth/swagger.yml:jwt:56
+512b7bbc16d1f8198872fb517814362b81b18388:docs/auth/swagger.yml:jwt:56
+512b7bbc16d1f8198872fb517814362b81b18388:docs/auth/api.html:jwt:293
+32e35ad4fb9c7c2ba8ed4a6043176f1e73801814:monitoring/utils/sample-application-under-test/percona/cr.yaml:hashicorp-tf-password:213
+352f8c6ae9a3b93ce841e6bc3b3a296c0f917846:litmus-portal/backend/auth/pkg/providers/github/github.go:generic-api-key:14
+92da50bb8ff07fce3427e70449844b77b7ee3270:apps/datastax/deployers/common/opscenter/conf-dir/conf/ssl/opscenter.key:private-key:1
+edb1d8dc6e2d1044a9fcb3677727363bbe1e267c:mysql-master/Dockerfile:generic-api-key:37
+edb1d8dc6e2d1044a9fcb3677727363bbe1e267c:mysql-slave/Dockerfile:generic-api-key:37
+fd88a74c81ae34796a42fafed1a61bf1edc06607:auth/v3.0.0/auth-api.json:jwt:140
+fd88a74c81ae34796a42fafed1a61bf1edc06607:auth/v3.0.0/auth-api.json:jwt:185
+fd88a74c81ae34796a42fafed1a61bf1edc06607:auth/v3.0.0/auth-api.json:jwt:278
+6eb10ad366fb3bd040cda61e8c64e47f15d576be:auth/v3.0.0/auth-api.json:jwt:46
diff --git a/mkdocs/docs/auth/v2.0.0/api.html b/mkdocs/docs/auth/v2.0.0/api.html
@@ -454,7 +454,7 @@ <h5>
                     <head></head>
                     <body>
                       <pre><code class="hljs language-json">{
-  <span class="hljs-attr">"access_token"</span>: <span class="hljs-string">"eyJhbGciOiJIUzUxMiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE2MjcxMjY4MjMsInJvbGUiOiJhZG1pbiIsInVpZCI6ImY4MDM2YzUxLTBkNzktNGNkNy1hN2QwLTQ1ZGNhZGI4MGVlYiIsInVzZXJuYW1lIjoiYWRtaW4ifQ.zNIMwocHgmguwtGFupV54UfcfwEdaRO1_xB2ilalqn0fp-JE0ujkHT3gDyepnEGSRm2j1eTopPgtvyRVPb7gGA"</span>,
+  <span class="hljs-attr">"access_token"</span>: <span class="hljs-string">"ACCESS_TOKEN"</span>,
   <span class="hljs-attr">"expires_in"</span>: <span class="hljs-number">86400</span>,
   <span class="hljs-attr">"type"</span>: <span class="hljs-string">"Bearer"</span>
 }
diff --git a/mkdocs/docs/auth/v2.0.0/swagger.yml b/mkdocs/docs/auth/v2.0.0/swagger.yml
@@ -54,7 +54,7 @@ paths:
           description: OK
           examples:
             application/json:
-              access_token: eyJhbGciOiJIUzUxMiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE2MjcxMjY4MjMsInJvbGUiOiJhZG1pbiIsInVpZCI6ImY4MDM2YzUxLTBkNzktNGNkNy1hN2QwLTQ1ZGNhZGI4MGVlYiIsInVzZXJuYW1lIjoiYWRtaW4ifQ.zNIMwocHgmguwtGFupV54UfcfwEdaRO1_xB2ilalqn0fp-JE0ujkHT3gDyepnEGSRm2j1eTopPgtvyRVPb7gGA
+              access_token: ACCESS_TOKEN
               expires_in: 86400
               type: Bearer
           schema:
diff --git a/mkdocs/docs/auth/v3.0.0/auth-api.json b/mkdocs/docs/auth/v3.0.0/auth-api.json
@@ -177,7 +177,7 @@
                   {
                     "user_id": "23d693b9-bae4-4076-9cd5-ebd3949c98d6",
                     "name": "test-api-token",
-                    "token": "eyJhbGciOiJIUzUxMiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE2OTI1MTEzMTIsInJvbGUiOiJhZG1pbiIsInVpZCI6IjIzZDY5M2I5LWJhZTQtNDA3Ni05Y2Q1LWViZDM5NDljOThkNiIsInVzZXJuYW1lIjoiYWRtaW4ifQ.4-bvGu8iVlrn6N7aHZQl6xKk4Nl-EPoeCO4euO8cGg0PigxYJGeyHy70cC9hgFvjc2_BVskuvjhK3-auOT6llA",
+                    "token": "ACCESS_TOKEN",
                     "expires_at": 1627040198,
                     "created_at": 1627040098
                   }
@@ -327,7 +327,7 @@
                 }
               },
               "example": {
-                "token": "eyJhbGciOiJIUzUxMiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE2OTI1MTEzMTIsInJvbGUiOiJhZG1pbiIsInVpZCI6IjIzZDY5M2I5LWJhZTQtNDA3Ni05Y2Q1LWViZDM5NDljOThkNiIsInVzZXJuYW1lIjoiYWRtaW4ifQ.4-bvGu8iVlrn6N7aHZQl6xKk4Nl-EPoeCO4euO8cGg0PigxYJGeyHy70cC9hgFvjc2_BVskuvjhK3-auOT6llA"
+                "token": "ACCESS_TOKEN"
               }
             }
           }

Original file line number	Diff line number	Diff line change
`@@ -454,7 +454,7 @@ <h5>`
`454`	`454`	`<head></head>`
`455`	`455`	`<body>`
`456`	`456`	`<pre><code class="hljs language-json">{`
`457`		`- <span class="hljs-attr">"access_token"</span>: <span class="hljs-string">"eyJhbGciOiJIUzUxMiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE2MjcxMjY4MjMsInJvbGUiOiJhZG1pbiIsInVpZCI6ImY4MDM2YzUxLTBkNzktNGNkNy1hN2QwLTQ1ZGNhZGI4MGVlYiIsInVzZXJuYW1lIjoiYWRtaW4ifQ.zNIMwocHgmguwtGFupV54UfcfwEdaRO1_xB2ilalqn0fp-JE0ujkHT3gDyepnEGSRm2j1eTopPgtvyRVPb7gGA"</span>,`
	`457`	`+ <span class="hljs-attr">"access_token"</span>: <span class="hljs-string">"ACCESS_TOKEN"</span>,`
`458`	`458`	`<span class="hljs-attr">"expires_in"</span>: <span class="hljs-number">86400</span>,`
`459`	`459`	`<span class="hljs-attr">"type"</span>: <span class="hljs-string">"Bearer"</span>`
`460`	`460`	`}`
Original file line number	Diff line number	Diff line change
`@@ -177,7 +177,7 @@`
`177`	`177`	`{`
`178`	`178`	`"user_id": "23d693b9-bae4-4076-9cd5-ebd3949c98d6",`
`179`	`179`	`"name": "test-api-token",`
`180`		`- "token": "eyJhbGciOiJIUzUxMiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE2OTI1MTEzMTIsInJvbGUiOiJhZG1pbiIsInVpZCI6IjIzZDY5M2I5LWJhZTQtNDA3Ni05Y2Q1LWViZDM5NDljOThkNiIsInVzZXJuYW1lIjoiYWRtaW4ifQ.4-bvGu8iVlrn6N7aHZQl6xKk4Nl-EPoeCO4euO8cGg0PigxYJGeyHy70cC9hgFvjc2_BVskuvjhK3-auOT6llA",`
	`180`	`+ "token": "ACCESS_TOKEN",`
`181`	`181`	`"expires_at": 1627040198,`
`182`	`182`	`"created_at": 1627040098`
`183`	`183`	`}`
`@@ -327,7 +327,7 @@`
`327`	`327`	`}`
`328`	`328`	`},`
`329`	`329`	`"example": {`
`330`		`- "token": "eyJhbGciOiJIUzUxMiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE2OTI1MTEzMTIsInJvbGUiOiJhZG1pbiIsInVpZCI6IjIzZDY5M2I5LWJhZTQtNDA3Ni05Y2Q1LWViZDM5NDljOThkNiIsInVzZXJuYW1lIjoiYWRtaW4ifQ.4-bvGu8iVlrn6N7aHZQl6xKk4Nl-EPoeCO4euO8cGg0PigxYJGeyHy70cC9hgFvjc2_BVskuvjhK3-auOT6llA"`
	`330`	`+ "token": "ACCESS_TOKEN"`
`331`	`331`	`}`
`332`	`332`	`}`
`333`	`333`	`}`