Skip to content

Add Gitleaks Secret Scanning to GitLab CI Pipeline

Dhruva Gadegoni requested to merge Database into main

Implemented secret scanning in the GitLab CI pipeline using Gitleaks to improve repository security and compliance.

Changes made:

  • Added a dedicated secret_scan job in .gitlab-ci.yml
  • Integrated Gitleaks for automated detection of exposed secrets and credentials
  • Included secret scanning in the security stage of the pipeline
  • Maintained existing linting, formatting, type checking, testing, and coverage workflows

Benefits:

  • Detects accidental commits of API keys, tokens, passwords, and other sensitive information
  • Improves project compliance and security posture
  • Ensures automated secret detection during CI/CD execution

Merge request reports