Skip to content

[Snyk] Security upgrade urllib3 from 1.22 to 1.26.18 #4

[Snyk] Security upgrade urllib3 from 1.22 to 1.26.18

[Snyk] Security upgrade urllib3 from 1.22 to 1.26.18 #4

name: Secrets Detection
on: pull_request
jobs:
secrets_detection:
runs-on: ubuntu-latest
if: github.repository == 'demisto/content' && github.event.pull_request.head.repo.fork == false && github.actor != 'dependabot[bot]'
steps:
- name: Checkout
uses: actions/checkout@v3
- name: Setup Python
uses: actions/setup-python@v3
with:
python-version: '3.8'
- name: Setup Poetry
uses: Gr1N/setup-poetry@v8
- name: Install Python Dependencies
run: |
poetry install --with ci
- name: Run Secrets Detection
env:
PR_NUMBER: ${{ github.event.pull_request.number }}
BRANCH_NAME: ${{ github.head_ref }}
USERNAME: ${{ secrets.SECRET_CHECK_USER_NG }}
PASSWORD: ${{ secrets.SECRET_CHECK_PASS_NG }}
GOLD_SERVER_URL: ${{ secrets.GOLD_SERVER_URL_NG }}
run: |
echo "Run secrets detection for PR: $PR_NUMBER on branch: $BRANCH_NAME"
investigation_id=$(poetry run Utils/github_workflow_scripts/run_secrets_detection.py --pr_number $PR_NUMBER --branch_name $BRANCH_NAME --username $USERNAME --password $PASSWORD --gold_server_url $GOLD_SERVER_URL)
echo "INVESTIGATION_ID=$investigation_id" >> $GITHUB_ENV
- name: Wait For Playbook To Finish
env:
GOLD_API_KEY: ${{ secrets.SECRETS_GOLD_API_KEY_NG }}
AUTH_ID: ${{ secrets.SECRETS_GOLD_AUTH_ID_NG }}
GOLD_SERVER_URL: ${{ secrets.GOLD_SERVER_URL_NG_RESULT }}
run: |
echo "Invastigation id is: $INVESTIGATION_ID "
poetry run python ./Utils/github_workflow_scripts/run_secrets_detection_get_playbook_status.py -i $INVESTIGATION_ID -k $GOLD_API_KEY -ai $AUTH_ID --gold_server_url $GOLD_SERVER_URL