Make checksecretparts required in CI (#4921)

This commit is contained in:
Miccah
2026-04-24 09:21:07 -07:00
committed by GitHub
parent ad2f9a4b98
commit 3fc0c2aa66
+4 -7
View File
@@ -51,17 +51,14 @@ jobs:
- uses: actions/checkout@v4
- run: semgrep --config=hack/semgrep-rules/detectors.yaml pkg/detectors/
checksecretparts:
# Warning-only: reports detector packages that construct detectors.Result
# without populating SecretParts. Flip to hard-fail (drop continue-on-error
# and run with -fail) after every detector has been migrated. See
# hack/checksecretparts/README.md.
name: checksecretparts (warning)
# Reports detector packages that construct detectors.Result without
# populating SecretParts. See hack/checksecretparts/README.md.
name: checksecretparts
runs-on: ubuntu-latest
continue-on-error: true
steps:
- uses: actions/checkout@v4
- uses: actions/setup-go@v5
with:
go-version: "1.25"
- name: Run checksecretparts
run: go run ./hack/checksecretparts ./pkg/detectors
run: go run ./hack/checksecretparts -fail ./pkg/detectors