security check

.github/gitleaks.toml

@@ -0,0 +1,16 @@
+title = "gitleaks config"
+
+[[rules]]
+description = "OpenAI API Key"
+regex = '''sk-[a-zA-Z0-9]{32}'''
+tags = ["apikey"]
+
+[[rules]]
+description = "Hugging Face Token"
+regex = '''hf_[a-zA-Z0-9]{40}'''
+tags = ["apikey"]
+
+[[rules]]
+description = "GitHub Token"
+regex = '''ghp_[a-zA-Z0-9]{36}'''
+tags = ["apikey"]

.github/workflows/secret-scan.yml

@@ -0,0 +1,18 @@
+name: Secret Scan
+
+on: [push, pull_request]
+
+jobs:
+  gitleaks:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v2
+
+      - name: Install Gitleaks
+        run: |
+          curl -sSL https://github.com/zricethezav/gitleaks/releases/download/v8.2.0/gitleaks_8.2.0_linux_x64.tar.gz | tar -xz -C /usr/local/bin gitleaks
+
+      - name: Run Gitleaks
+        run: |
+          gitleaks detect --source . --config-path .github/gitleaks.toml