# GitHub Actions Workflow для сканирования на секреты
name: Secret Scanner

on:
  push:
  pull_request:

jobs:
  scan-for-secrets:
    runs-on: ubuntu-latest
    
    steps:
      - name: Checkout repository
        uses: actions/checkout@v3
        
      - name: Run gitleaks scanner
        uses: gitleaks/gitleaks-action@v2
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          
      - name: Check for .env files
        run: |
          git ls-files | grep -q "\.env$" && exit 1 || exit 0