Skip to content

Reworked gitleaks action and add gh cli install #78

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Nikolay1224 merged 1 commit into from
Jun 15, 2026
Merged

Reworked gitleaks action and add gh cli install #78

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
40 changes: 40 additions & 0 deletions gh/action.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,40 @@
name: "Install GH cli"
description: "Install GH cli"

inputs:
tool_version:
description: "GH cli version to install"
required: false
default: "v2.94.0"

runs:
using: "composite"
steps:
- name: Install GH
shell: bash
run: |
set -euo pipefail
TOOL_NAME="gh"
TOOL_VERSION="${{ inputs.tool_version }}"
TOOL_PATH="$RUNNER_TOOL_CACHE/$TOOL_NAME/$TOOL_VERSION"
echo "$TOOL_PATH" >> "$GITHUB_PATH"
CACHED_VERSION=$($TOOL_PATH/$TOOL_NAME version | tr -d '\n' | cut -f 3 -d ' ' || true)
if [[ "${TOOL_VERSION#v}" != "$CACHED_VERSION" ]]; then
echo "Current $TOOL_NAME is $CACHED_VERSION, downloading ${TOOL_VERSION}";
arch="$(uname -m)"
case "$arch" in
x86_64|amd64) pkg_arch="linux_amd64" ;;
aarch64|arm64) pkg_arch="linux_arm64" ;;
*) echo "Unsupported arch: $arch"; exit 1 ;;
esac
file_ver="${TOOL_VERSION#v}"
tgz="${TOOL_NAME}_${file_ver}_${pkg_arch}.tar.gz"
mkdir -p "$TOOL_PATH"
curl -Lsfo "$TOOL_PATH/$tgz" https://github.com/cli/cli/releases/download/${TOOL_VERSION}/${tgz}
tar -xzf $TOOL_PATH/$tgz -C $TOOL_PATH/
mv $TOOL_PATH/${TOOL_NAME}_${file_ver}_${pkg_arch}/bin/${TOOL_NAME} $TOOL_PATH/$TOOL_NAME
rm -rf $TOOL_PATH/$tgz $TOOL_PATH/${TOOL_NAME}_${file_ver}_${pkg_arch}
chmod +x "$TOOL_PATH/$TOOL_NAME"
else
echo "Current $TOOL_NAME is $CACHED_VERSION, skipping download"
fi
40 changes: 23 additions & 17 deletions gitleaks/action.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,23 +33,29 @@ runs:
shell: bash
run: |
set -euo pipefail
ver="${{ inputs.gitleaks_version }}"
file_ver="${ver#v}"
arch="$(uname -m)"
case "$arch" in
x86_64|amd64) pkg_arch="linux_x64" ;;
aarch64|arm64) pkg_arch="linux_arm64" ;;
*) echo "Unsupported arch: $arch"; exit 1 ;;
esac
base="https://github.com/gitleaks/gitleaks/releases/download/${ver}"
tgz="gitleaks_${file_ver}_${pkg_arch}.tar.gz"
curl -sSL "$base/$tgz" -o gitleaks.tgz
tar -xzf gitleaks.tgz gitleaks
chmod +x gitleaks
install_dir="$HOME/.local/bin"; mkdir -p "$install_dir"
mv gitleaks "$install_dir/gitleaks"
echo "$install_dir" >> "$GITHUB_PATH"
gitleaks version
TOOL_NAME="gitleaks"
TOOL_VERSION="${{ inputs.gitleaks_version }}"
TOOL_PATH="$RUNNER_TOOL_CACHE/$TOOL_NAME/$TOOL_VERSION"
echo "$TOOL_PATH" >> "$GITHUB_PATH"
CACHED_VERSION=$($TOOL_PATH/$TOOL_NAME version | tr -d '\n' || true)
if [[ "${TOOL_VERSION}" != "$CACHED_VERSION" ]]; then
echo "Current $TOOL_NAME is $CACHED_VERSION, downloading ${TOOL_VERSION}";
arch="$(uname -m)"
case "$arch" in
x86_64|amd64) pkg_arch="linux_x64" ;;
aarch64|arm64) pkg_arch="linux_arm64" ;;
*) echo "Unsupported arch: $arch"; exit 1 ;;
esac
file_ver="${TOOL_VERSION#v}"
tgz="${TOOL_NAME}_${file_ver}_${pkg_arch}.tar.gz"
mkdir -p "$TOOL_PATH"
curl -Lsfo "$TOOL_PATH/$tgz" https://github.com/gitleaks/gitleaks/releases/download/${TOOL_VERSION}/${tgz}
tar -xzf $TOOL_PATH/$tgz -C $TOOL_PATH/
rm -v $TOOL_PATH/$tgz
chmod +x "$TOOL_PATH/$TOOL_NAME"
else
echo "Current $TOOL_NAME is $CACHED_VERSION, skipping download"
fi

- name: Setup centralized config
shell: bash
Expand Down
Loading