WEBDIENSTE/openswarm
1
0
Fork 0
mirror of https://github.com/openswarm-ai/openswarm.git synced 2026-08-28 10:49:46 +02:00
Code Issues Packages Projects Releases Wiki Activity

[eric] ci: gitleaks fetches full main so renames scan incrementally not full-history

Browse Source
This commit is contained in:
ciregenz
2026-06-15 13:54:40 -07:00
parent 578a31fdd4
commit 2d82b13a1a
1 changed files with 6 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/gitleaks.yml
+6 -4
View File
@@ -48,11 +48,13 @@ jobs:
set -euo pipefail
BEFORE="${{ github.event.before }}"
AFTER="${{ github.sha }}"
# New-branch push: GH sends 40 zeros for `before`. Diff against
# main's merge-base instead so we only scan commits unique to the
# branch — fast and matches the gitleaks-action default.
# New-branch push (incl. a branch rename): GH sends 40 zeros for
# `before`. Diff against main's merge-base so we only scan commits
# unique to the branch. Fetch main at FULL depth, not --depth=1: a
# shallow main can't reach the fork point of a far-behind branch, so
# merge-base comes back empty and we'd full-rescan all of history.
if [ "$BEFORE" = "0000000000000000000000000000000000000000" ]; then
git fetch --no-tags --depth=1 origin main:refs/remotes/origin/main 2>/dev/null || true
git fetch --no-tags origin main:refs/remotes/origin/main 2>/dev/null || true
if git rev-parse --verify origin/main >/dev/null 2>&1; then
BEFORE=$(git merge-base origin/main "$AFTER" 2>/dev/null || echo "")
fi