Skip to content

JS-359 Create rule S6418 (hardcoded-secrets): Hard-coded secrets ar… #1809

JS-359 Create rule S6418 (hardcoded-secrets): Hard-coded secrets ar…

JS-359 Create rule S6418 (hardcoded-secrets): Hard-coded secrets ar… #1809

Workflow file for this run

name: dogfood merge
# This workflow is triggered on pushes to master and dogfood branches
on:
push:
branches:
- master
- 'dogfood/*'
jobs:
dogfood_merge:
runs-on: ubuntu-latest
name: Update dogfood branch
permissions:
id-token: write # required for SonarSource/vault-action-wrapper
steps:
- name: get secrets
id: secrets
uses: SonarSource/vault-action-wrapper@v3
with:
secrets: |
development/github/token/{REPO_OWNER_NAME_DASH}-dogfood-merge token | dogfood_token;
- name: git octopus step
env:
GITHUB_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).dogfood_token }}
id: dogfood
uses: SonarSource/gh-action_dogfood_merge@v1
with:
dogfood-branch: 'dogfood-on-peach'
# Use the output from the `dogfood` step
- name: Get the name of the dogfood branch and its HEAD SHA1
run: echo "The dogfood branch was ${{ steps.dogfood.outputs.dogfood-branch }} and its HEAD SHA1 was ${{ steps.dogfood.outputs.sha1 }}"