From d0ffb55bfd07ced2d8243fc2a4844a4381ab02d4 Mon Sep 17 00:00:00 2001 From: Byungjin Park Date: Mon, 9 Nov 2026 15:36:39 +0900 Subject: [PATCH] fix(gitleaks): report scans blocked by tool setup failures --- .github/workflows/secrets-scanning.gitleaks.yaml | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/.github/workflows/secrets-scanning.gitleaks.yaml b/.github/workflows/secrets-scanning.gitleaks.yaml index b3c5fde..1e218c3 100644 --- a/.github/workflows/secrets-scanning.gitleaks.yaml +++ b/.github/workflows/secrets-scanning.gitleaks.yaml @@ -61,6 +61,22 @@ jobs: tool_versions: | gitleaks ${{ inputs.gitleaks_version }} + - name: Report tool setup failure + id: setup-failure + if: ${{ failure() && steps.setup-tools.outcome == 'failure' }} + run: | + { + echo "## ⚠️ Secret Scan Not Run" + echo "" + echo "Tool setup failed before Gitleaks could run." + echo "No scan result is available; this does not confirm or rule out leaked secrets." + echo "" + echo "Check the setup logs and re-run the failed job after resolving the installation error." + echo "This check remains failed until the scan can run." + } >> "${GITHUB_STEP_SUMMARY}" + + echo "::error title=Secret scan not run::Tool setup failed before Gitleaks could run. Check the setup logs and re-run the failed job." + - name: Resolve scan scope id: scope env: