Skip to content

Implemented the requested GitLeaks-based secret scanning support#650

Open
AYOMI-cmd wants to merge 1 commit into
Smartdevs17:mainfrom
AYOMI-cmd:Add-secret-scanning-and-credential-leak-detection-in-CI/CD-pipeline
Open

Implemented the requested GitLeaks-based secret scanning support#650
AYOMI-cmd wants to merge 1 commit into
Smartdevs17:mainfrom
AYOMI-cmd:Add-secret-scanning-and-credential-leak-detection-in-CI/CD-pipeline

Conversation

@AYOMI-cmd

Copy link
Copy Markdown

Closes #606

✅ Secret Scanning Integration Added

Implemented the requested GitLeaks-based secret scanning support:

New files

  • .gitleaks.toml
  • .gitleaks.baseline.toml
  • .pre-commit-config.yaml
  • secret-scan.yml
  • revoke-stellar-key.sh
  • pre-commit-gitleaks.sh
  • SECURITY.md

What this includes

  • Custom GitLeaks rules for:
    • Stellar secret keys (S...)
    • Stripe API keys (sk_live_, sk_test_)
    • JWTs
    • PEM private keys
    • High-entropy data / binary secrets
  • Local pre-commit hook scanning staged files
  • CI full history scan on main and release/**
  • Slack webhook alerting support via secrets.SECRET_SCAN_SLACK_WEBHOOK_URL
  • PR auto-commenting when leaks are found
  • Stellar secret revocation automation via script + CI step
  • Documentation for secure secret handling and remediation

@drips-wave

drips-wave Bot commented Jun 24, 2026

Copy link
Copy Markdown

@AYOMI-cmd Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add secret scanning and credential leak detection in CI/CD pipeline

1 participant