pr.yaml

name: pr
on:
  pull_request:
  workflow_dispatch:
  push:
    branches:
      - main
jobs:
  secret_check:
    name: secret_check
    runs-on: ubuntu-latest
    steps:
      # Checkout your repository under $GITHUB_WORKSPACE, so your job can access it
      - name: Checkout Repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: for the first ever commit 
        shell: bash
        run: |
          curl -sfL 'https://raw.githubusercontent.com/orcasecurity/orca-cli/main/install.sh' | bash -s
          orca-cli -p default --api-token ${{ secrets.ORCA_SECURITY_API_TOKEN }} secrets scan --path .  --from-commit 03f6689796b4c982812be8b40ba53811830bb164
      - name: from-commit no such commit 
        if: always()
        shell: bash
        run: |
          curl -sfL 'https://raw.githubusercontent.com/orcasecurity/orca-cli/main/install.sh' | bash -s
          orca-cli -p default --api-token ${{ secrets.ORCA_SECURITY_API_TOKEN }} secrets scan --path .  --from-commit 03f6689796b4c982812be8b40ba53811830bb163
          - name: from-commit no such commit 
      - name: from-commit no commit at all  
        if: always()
        shell: bash
        run: |
          curl -sfL 'https://raw.githubusercontent.com/orcasecurity/orca-cli/main/install.sh' | bash -s
          orca-cli -p default --api-token ${{ secrets.ORCA_SECURITY_API_TOKEN }} secrets scan --path .  --from-commit 
      - name: to-commit   
        if: always()
        shell: bash
        run: |
          curl -sfL 'https://raw.githubusercontent.com/orcasecurity/orca-cli/main/install.sh' | bash -s
          orca-cli -p default --api-token ${{ secrets.ORCA_SECURITY_API_TOKEN }} secrets scan --path .  --to-commit 040ffa9afbbcb054ae839b8e56815487522cffae
      - name: from-commit to-commit   same commit
        if: always()
        shell: bash
        run: |
          curl -sfL 'https://raw.githubusercontent.com/orcasecurity/orca-cli/main/install.sh' | bash -s
          orca-cli -p default --api-token ${{ secrets.ORCA_SECURITY_API_TOKEN }} secrets scan --path . --from-commit 040ffa9afbbcb054ae839b8e56815487522cffae --to-commit b02f437f1bc43cf8af34cf6d16d47614296230f7
      - name: from-commit to-commit oppiste
        if: always()
        shell: bash
        run: |
          curl -sfL 'https://raw.githubusercontent.com/orcasecurity/orca-cli/main/install.sh' | bash -s
          orca-cli -p default --api-token ${{ secrets.ORCA_SECURITY_API_TOKEN }} secrets scan --path . --from-commit f01d2f6b68821fe3fdae8984fa8cbe68378f1d08 --to-commit 5a7e202bc669aa05353d7f7dd17770950a5f9078
      - name: full history
        if: always()
        shell: bash
        run: |
          git config --global fetch.prune false
          git fetch --all
          git reflog
          git branch -a
          curl -sfL 'https://raw.githubusercontent.com/orcasecurity/orca-cli/main/install.sh' | bash -s
          orca-cli -p default --api-token ${{ secrets.ORCA_SECURITY_API_TOKEN }} secrets scan --path .  --ignore-git-history-baseline